Y
Hacker News
new
|
ask
|
show
|
jobs
by
kmwyard
2028 days ago
Signal requires phone numbers because of taking care of users' privacy. Signal's choice to require a phone number is due to storing a contact list on a local machine to protect users' metadata. And PGP is never as secure as Signal or Other Encrypted Messenger (WhatsApp). Many Cryptographers blamed about weak security of PGP (
https://latacora.micro.blog/2019/07/16/the-pgp-problem.html
,
https://latacora.micro.blog/2020/02/19/stop-using-encrypted....
,
https://blog.cryptographyengineering.com/2014/08/13/whats-ma...
,
https://blog.filippo.io/giving-up-on-long-term-pgp/
) and even Edward Snowden doesn't use it now (
https://twitter.com/Snowden/status/1175437588129308672
).
2 comments
SahAssar
2027 days ago
Why wouldn't signal be able to store local data without a phone number? Your argument seems like a red herring.
link
deepstack
2027 days ago
They could also just ask for an email, like wire does.
Edit: or generate a UUID type random string for each new device.
link
kmwyard
2027 days ago
This is because unlike Signal, the wire store user contact is on the server. (
https://www.vice.com/en/article/gvzw5x/secure-messaging-app-...
)
link