|
|
|
|
|
by ccooffee
922 days ago
|
|
For a secure communications app, the website is awfully light on details of that security. This could just be a mis-alignment issue (i.e. website aimed at "average users" who may find technical jargon a reason to avoid the app). But my initial question of "why would I use this over Signal or GPG emails?" doesn't seem answerable from the website. The security page says: > 3. Verified and Secure -- Widely reviewed Open Source Public Key Cryptography and App itself can be fully audited and accredited. As a bit of feedback, this description needs some cleanup. The word "can" in here is a scary word. Has the app been audited and accredited? If it has, make that clear. (Perhaps include information about when the app was audited and by whom.) If it has not been audited and accredited, this advertising blurb is a super red flag. "We could do some security stuff in the future but have not yet" wouldn't go onto the website, but you've wrapped the statement in enough jargon that unsophisticated users may be misled. |
|