Comment

Comment by upofadown

Unfortunately, in an end to end encrypted messaging system, an identity is denoted by some sort of long number. That is an inescapable fact. Trusting a third party to correctly map, say, a phone number to a cryptographic identity number eventually results in the sort of attacks we have been seeing with phone oriented encrypted messengers recently like WhatsApp and Signal. The PGP people were doing the right thing when they were doing education in the form of key signing parties. That is something the user needs to know.

Anonymous messengers have no real choice and have to use some sort of number for identity. See Briar, Session or Tox for examples.

My comments on Signalgate 1.0:

https://articles.59.ca/doku.php?id=em:sg

parent upofadown 1 month ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton