logoalt Hacker News

p-e-wtoday at 10:02 AM1 replyview on HN

> Isn't this conflating encryption with trust?

Absolutely, and the claim is somewhere between nonsense and pedantry bordering on nonsense.

The exact same thing is true for, say, Signal. The provider delivers the client, and they aggressively block non-official clients from participating. So the “ends” in end-to-end are ultimately controlled by Signal. But as long as you trust the Signal company not to insert a backdoor into your client, it’s still true that the company can’t read your texts.


Replies

sneaktoday at 10:30 AM

Signal does not aggressively block non-official clients. I constantly use a modified version of Signal Desktop containing a small set of my own patches, and it always works fine. Also, while autoupdate is on by default for the Signal client (and it includes a time bomb expiration to attempt to "force" you to upgrade regularly (removing this is one of my patches)), you are free to turn it off and remove their ability to modify the code on your own system.