Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That would only compromise metadata as signal is e2e encrypted and the client has always been opensource and up to date.

All the SGX stuff is about making metadata more private for features that absolutely must be done serverside. So a compromise in SGX is more an issue if Signal itself becomes adversarial or gets compromised. Most services only rely on this for security and don't use things like SGX to hide things from themselves.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: