Hacker News new | ask | show | jobs
by ambicapter 654 days ago
If they believe that uncontrolled 3rd-party clients would make it easier to breach their protocol (because they know their protocol's weaknesses), it would make sense to be openly hostile to 3rd-party clients.
3 comments

If there's no third party client then the e2e is completely moot because Signal could be forced to push a backdoor to their customers and they would never know e2e has been removed.
Fair point, I guess it goes both ways.
The strength and security of any good protocol, especially Signal's, does not come from obscurity.

See https://en.wikipedia.org/wiki/Security_through_obscurity

How would a third party client make it easier to breach the protocol? You can still study the source of the client, the protocol, make a fork of it and modify it, etc. The official client is fully open source.

The argument for security for disallowing other clients would be being able to modify the protocol to patch out security issues without worrying about compatibility with other clients.