Questions tagged [signal]
A protocol (as well as an app implementing it) for end-to-end encrypted instant messaging.
11
questions
0
votes
0answers
45 views
Does the NSO Group's Pegasus malware compromise chats and voice calls in Signal as well?
I am aware that the Pegasus malware is capable of extracting contact lists, ordinary text messages, switching on microphone / camera remotely etc. Is it also capable of extracting the contents of ...
5
votes
1answer
232 views
How can WhatsApp be listed on the EFF secure application toolset when it's not opensource? [closed]
I see this EFF tool guide, proposing WhatsApp as one of "our pick of the best, most secure applications" source.
How can WhatsApp be trusted as a secure application when it is not open-source (...
0
votes
1answer
87 views
How to use Username/Password in Signal Protocol
I am trying to create a communication app from scratch (more like an html parsed messaging app) using the Signal protocol. While I do have lot to of programming experience, I am a crypto novice and ...
10
votes
1answer
367 views
Private messaging for protesters
Hello I am a protester in Hong Kong.
Many protesters use telegram group. I have heard recently from the News that a group admin was tricked by the police to unlock their phone (police cannot force ...
1
vote
0answers
83 views
HTTP body E2E encryption protocol
I have 2 servers that communicate each other in HTTP and they are both behind an API gateway.
Between the servers and their API gateways the communication is in HTTPS with mutual authentication using ...
3
votes
2answers
191 views
Can a data requester get the sender when “Sealed sender” is enabled in Signal?
The Signal app offers to seal the sender. The whole process can be summarized in the following steps:
The app encrypts the message using Signal Protocol, as usual.
Include the sender certificate and ...
5
votes
1answer
390 views
How was IronChat compromised?
How was IronChat compromised?
https://hotforsecurity.bitdefender.com/blog/police-crack-encrypted-chat-service-ironchat-and-read-258000-messages-from-suspected-criminals-20530.html
Dutch police ...
1
vote
1answer
166 views
Signal Protocol: How is identity exchanged if a key exchange hasn't happened yet?
On Signal's blog they mention that keys for accessing your profile are exchanged normally with your contacts using the Signal Protocol just like messages are (implying they are already contacts and ...
17
votes
2answers
3k views
Why iterate 5200 times when computing Safety Numbers in Signal?
Safety numbers in Signal are derived from a hash of the conversation's users public keys and their phone numbers. Safety number are used to ensure that the conversation was not MITM-ed.
When ...
4
votes
1answer
311 views
Can Signal encrypted voice calls be listened into by other apps?
Signal App (by Open Whisper) provides encrypted voice calls allowing two people to communicate via a data connection with secure encryption (assuming no MiTM attack). Given that Signal App uses the ...
24
votes
2answers
6k views
Is Signal still more secure than WhatsApp?
WhatsApp has "recently" deployed end-to-end encryption using the Signal protocol, which is of course also being used by Signal itself. The related white paper (PDF).
Now this raises the question:
Is ...
