Granted, the part

The globally recommended app by privacy and security experts, Signal, is now being downloaded massively and tops the Danish Google Play Store

is a little ironic, but you gotta push this winning tide and then work from that.

  • Vincent@feddit.nl
    link
    fedilink
    English
    arrow-up
    2
    ·
    21 hours ago

    Which server?

    The server running Signal’s server-side code.

    People don’t control their phone. There is no way of knowing if the installed app is the one that is running.

    Some do, and that’s the point: if there’s an attempt at tampering, interested security researchers can detect it.

    • plyth@feddit.org
      link
      fedilink
      English
      arrow-up
      1
      ·
      21 hours ago

      The server running Signal’s server-side code.

      What could a client detect? Signal is a US company and will comply with the government. The server can’t be trusted.

      Some do, and that’s the point: if there’s an attempt at tampering, interested security researchers can detect it.

      They can detect if a different app was installed from the store on their phone. That’s not useful for anybody to know if their own app is unaltered. Only people of interest will receive a manipulated client. So there is no security in knowing that some people received the original app.

      Besides, Google runs the OS. They can change the app at runtime.