hodor137 t1_j9xdcqg wrote on February 25, 2023 at 6:16 AM

Reply to comment by FriendlyDespot in Signal CEO: We “1,000% won’t participate” in UK law to weaken encryption by ActivePersona

Or they could simply have the app upload your keys to their server.

But as others have pointed out, they open source their code so they can't do this without everyone finding out.

My point was really that the comment I was replying to was dumb - just because you have "encryption" doesn't mean no one will ever read your messages. The keys that can decrypt those encrypted messages must also be kept safe.

FriendlyDespot t1_j9xdldu wrote on February 25, 2023 at 6:18 AM

> Or they could simply have the app upload your keys to their server.

That wouldn't make much sense, because the keys are ephemeral, so you'd have to upload about as many keys as there'd be messages.