"Gruyere Signal"
Especially with Signal being open source. What stops the official Signal company from advertising another fork?
kubica@fedia.io 1 month ago
Especially with Signal being open source. What stops the official Signal company from advertising another fork?
"Gruyere Signal"
einkorn@feddit.org 1 month ago
The server software is not open source.
massive_bereavement@fedia.io 1 month ago
Untrue. Stop spreading FUD:
https://github.com/signalapp/Signal-Server
30p87@feddit.org 1 month ago
There’s a grain of truth in the claim: We don’t know for sure if the original open source version is actually running on the server.
Plopp@lemmy.world 1 month ago
Isn’t that true of all server side FOSS?
bamboo@lemmy.blahaj.zone 1 month ago
They’ve said that they release the source code after it’s running in production:
github.com/signalapp/Signal-Android/issues/11101#…
einkorn@feddit.org 1 month ago
In that case: They started publishing code AGAIN.
The server soft has been available, then not, and apparently now again.
30p87@feddit.org 1 month ago
That’d be irrelevant, because as long as only the clients hold the keys (which we can verify, as those are not only open source but also are under our control, meaning we can check that the upstream open source version is installed and no private keys are being exchanged) there’s no way anyone can read the messages, except the owner of the private key.
EngineerGaming@feddit.nl 1 month ago
Messages - yes, but there is also metadata. When ALL communication goes through the same servers, it becomes kind of a problem.