Improving Signal's Sealed Sender (2021)

Did Signal fix the protocol, or at least responded with something?

Interesting analysis! Showing (once again) that anonymity is difficult to achieve.

Consider adding 2021 to the post title, for clarity. Anyhow, interesting article. Thanks for sharing.

from 2021

FYI I don't think Signal cares much about anonymity (sadly). I've seen several discussions on their forums where admins have even been hostile to people asking for it. I love Signal, but its community is toxic and I really wish the devs would move a bit faster. I know it is a tall order, but that's what Moxie argued in his "The Ecosystem is Moving" talk (we can't have decentralized because you have to move fast and adapt). There's a lot of low hanging fruit that Signal just seems to ignore.

My impression is that since around 2020 Signal devs have been trying as quietly as possible to tell people that the service can no longer be trusted and everyone should switch to something else. First they started keeping sensitive user data in the cloud which upset and alienated a bunch of users, they&#x27;ve also refused to update their privacy policy to reflect that fact, then they added the weird crypto thing which upset more users, and killing off the ability to handle SMS&#x2F;MMS as well as secure communications, one of their best features, seems like yet another attempt drive away users. Maybe going years without fixing important features with known vulnerabilities is just another hint being left to ward off anyone who really needs their communications secure.<p>I loved signal and recommended it to many people over the years, but I ditched it after they started collecting and insecurely storing user data in the cloud, and I&#x27;m still disappointed in what it has turned into. The folks behind Signal had a great project once and I hope someone outside of the US steps up to give us a real replacement one of these days.