"I don't trust Signal" article

I don’t agree with a lot of this criticism but I think it’s important to read nonetheless: https://drewdevault.com/2018/08/08/Signal.html

Basically, I think they are falling into a typical open source developer trap of saying like, “this doesn’t work for X, Y, and Z very serious threat models, so it’s crap and doesn’t work at all”. The attack surfaces listed here are real but they are also things that will never happen to the majority of users.

1 Like

I’m looking at the Signal alternatives listed at the end of the article. Do you have experience with Matrix or Tox? How would you say they compare?

@josh Matrix is a protocol, and it’s used by Riot.im which is basically a Slack alternative: https://about.riot.im/

It works fine and is trusted. But it’s not a replacement for texting…it’s a chatroom. Pretty different.

Tox is also a protocol and I’ve never used any of its clients (which are listed here): https://en.wikipedia.org/wiki/Tox_(protocol)#Clients

I don’t know anyone who uses any of the Tox clients either. That probably means that they’re super experimental/beta.