This is a clever way to do this, but it still seems like someone caring about their privacy should just do without gifs.<p>Edit: I should rephrase - I mean someone with a larger-than-usual need for privacy, someone paranoid for a reason. This is great for the typical privacy concious user. But if I was sending documents to WikiLeaks, I would not sum them up with a cute GIF.
Good<p>They know that for a bigger adoption they need those usability improvements, at the same time, they make sure additional features don't compromise the security expected from their app
Is there a federated and/or self-hosted alternative to Signal with similar privacy and security properties? Even if it supports fewer platforms?<p>I've been getting more and more interested in running my own (and perhaps my friends') infrastructure, but I haven't found anything better than IRC for chat.
<i>"For instance, if someone messages you with an invitation, you might want to write back with a message that says "I'm excited." With integrated GIF search, you could instead do a GIF search for "I'm excited" and send one of the results instead."</i><p>What? Why? Is it some kind of attempt to become a new "cool" app? Sounds totally useless function to me, but if it helps to get more users, well, maybe that's a good thing.
It would be interesting for services to publish a public encryption key, so the signal client could encrypt the payload with that.<p>However, that has very limited usefulness, so I don't see it happening soon.
> The GIPHY service could use subtleties like TLS session resume or cache hits to try to correlate multiple requests as having come from the same client, even if they don't know the origin.<p>How would a cache hit mean same user tried to search? TLS session resume, I can understand but cache hit only means same resource was accessed not same user tried to access.
Great! Now that these easy, low-hanging-fruit features are taken care of, maybe we'll get some of the more involved security oriented ones, like, IDK, having an indication if I verified a contact or not so I can, you know, know whether I should verify or not when the opportunity presents itself.
Oh great, they are catching up with Wire (<a href="https://wire.com/" rel="nofollow">https://wire.com/</a>).<p>Now if they would just resolve real bugs (like many people not being able to register to Signal), that would be maybe cool (but as they implemented Signal Protocol to WhatsApp and others (if we can trust code we can't see) I can't say I see any point in it).<p>Maybe I am wrong, but it lost that appeal it had some time in past.