• Arthur Besse@lemmy.ml
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      1 year ago

      They say that they don't, and I think it is extremely likely that Signal employees are entirely sincere when they say that.

      But, even if they truly don't keep metadata, they can't actually know what their hosting provider (Amazon) is doing. And, their cryptographic "sealed sender" thing doesn't really solve the problem. If someone with the right access at Amazon really wants the Signal metadata, they can get it, and if they can, anybody who can coerce, compel, or otherwise compromise those people (or their computers) can get it too.

      One can say they're confident that the kind of adversaries they care to protect against don't have that kind of capability, but it isn't reasonable to say that Signal's no-logging policy protects metadata without adding the caveat that routing all the traffic through Amazon makes the metadata of the protocol's entire userbase available in a single place for the kind of adversaries that do.

            • Arthur Besse@lemmy.ml
              link
              fedilink
              arrow-up
              1
              ·
              1 year ago

              What stops them from being able to? They could actually infer a lot of the metadata just from the encrypted network traffic, without even looking inside the VMs at their execution state. But, they can also see inside, so they can keep the kind of logs (outside the VM) which Signal [says that they] wouldn't.