Post

The #SignalApp is not secure, as they promise to be! #Signal collects your metadata the same way that #Whatsapp does. All of Signals traffic runs across the Clouds of Google, Amazon, Microsoft & Cloudflare. They can de-anonymise every user! Here are all the details: primal.net/e/note14hf9d...

That link is a big pile of words which says nothing about what data signal actually captures or exposes, only gestures vaguely at "big cloud provider evil", and shills another (less secure) messenger app.

you need to be specific when you say "Signal collects your metadata the same way that WhatsApp does". what metadata? is it IP address or something else? also, Signal has passed many audits and is open-source. the blog post you linked is full of misinformation, too.

Read the primal link is all explained there!

Doesn't an NPU assisted device like Apple AI, Co-Pilot, or Gemini already pre-capture sensitive data regardless of transmission or reception?

How about putting in something along these lines as a disclaimer in the DM interface? Probably the best way to spread awareness about these known limitations.

(this is not in reference to any recent change in requests or policy; just a general public health announcement)

we do want to do great E2EE DMs in the protocol eventually, but we'll probably do private data first. also, Signal is great and exists already.

has anyone on the team done any research on DIDComm for this yet? totally understand if it's not a high priority, but seems to me you could get pretty good secure 1:1 DMs fairly easily with it

Is there already some dicussion taking place about how private data would be implemented in the protocol ?