this post was submitted on 20 Oct 2024
30 points (76.8% liked)

Technology

59593 readers
6512 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s
[email protected]
[email protected]
L4s
enu
30
Why doesn't Signal forbid third party clients or at least offer a client certification program to ensure security? (feddit.org)
submitted 1 month ago* (last edited 1 month ago) by [email protected] to c/technology
16 comments fedilink hide all child comments
 

  • Signal forks can have unexpected behaviours like retaining deleted messages and also they don't get updated at the same rate that Signal get updated.

  • Every couple of years I hear a story about hackers disturbing signal with backdoors, which would be impossible or very hard to be done If they blocked third party clients. (Ex: 1)

  • The amount of people who use third party Signal clients are very few anyway.

I saw what WhatsApp did to forbid modification of it's app which works in stopping a lot of distributions, why doesn't Signal do the same?

you are viewing a single comment's thread
view the rest of the comments
[โ€“] rottingleaf 0 points 1 month ago (1 children)

As I said, a compromise here would be to have a client security certification program, where no other clients outside it would be able to use Signal.

You mean running a trojan "as a mean of security", similar to anticheats? Are you sure this is a good idea?

Or if by "program" you mean having some allowed clients as opposite to only the official one allowed, it's a social thing, not a technical one. So it still won't prevent anyone from connecting with another client.