Mixed bag – Signal - Private Messenger Review

Lots of features (Gify, stickers, reacts, self destructing messages), but it requires you to give out your phone number to everyone you talk to, does not allow specifying a different server, and beyond those privacy concerns, it has gone downhill lately in terms of usability and security as well. It now it forces a PIN even if you don’t want one. Private keys are sent through the server to enable moving from one device to another. Signal used to store private keys in hardware and it was impossible to export them. This ensured that nobody could ever covertly get your key. They removed this security protection and do not even provide an option to use the more secure key storage. The Signal developers could have enabled a smooth device transfer and kept the keys in hardware by having the old key sign the new one so others will 1.) know that the new key is new 2.) know that it is legitimate, and 3.) be able to verify the move using another communication channel if they suspect something is amiss. The Signal developers decided against this. Given the developers’ recent decisions, and their unwillingness to allow people to use their system without divulging their phone numbers, earns this app 3 stars. If they put more focus on privacy, security, and allowed connecting to private servers, it could easily be a 5-star app.
Review by George McFly 2 on Signal - Private Messenger.