Comment on Signal under fire for storing encryption keys in plaintext
eco_game@discuss.tchncs.de 4 months agoI’m not too knowledgeable on that topic, but doesn’t Linux store WiFi or smb-share passwords in some keychain?
Comment on Signal under fire for storing encryption keys in plaintext
eco_game@discuss.tchncs.de 4 months agoI’m not too knowledgeable on that topic, but doesn’t Linux store WiFi or smb-share passwords in some keychain?
TheEntity@lemmy.world 4 months ago
Either multiple different keychains or even you can have no keychain-like application in your system at all.
The WiFi passwords are usually stored in
/etc/NetworkManager
as plain files. Granted, they are not accessible directly by non-root users as they are being managed by the NetworkManager daemon, but there is nothing generic for such a thing. Signal rolling a similar daemon for itself would be an overkill. The big desktop environments (GNOME, KDE…) usually have their own keychain-like programs that the programs provided by these environments use, but that only solves this problem for the users of these specific environments.To me it’s perfectly expected the Signal encryption keys are readable by my user account.