Nemeski@lemm.ee to Privacy Guides@lemmy.oneEnglish · 7 days agoSignal under fire for storing encryption keys in plaintextstackdiary.comexternal-linkmessage-square49fedilinkarrow-up1210arrow-down10cross-posted to: [email protected][email protected][email protected][email protected]
arrow-up1210arrow-down1external-linkSignal under fire for storing encryption keys in plaintextstackdiary.comNemeski@lemm.ee to Privacy Guides@lemmy.oneEnglish · 7 days agomessage-square49fedilinkcross-posted to: [email protected][email protected][email protected][email protected]
minus-squarebreadsmasher@lemmy.worldlinkfedilinkEnglisharrow-up118·7 days ago on desktop devices Kinda should have been in the headline
minus-squareTramort@programming.devlinkfedilinkEnglisharrow-up44·7 days agoIt is a super important detail, but it’s still unforgivable for an app that expects privacy to be part of its brand identity.
minus-squarebrakebreaker101@lemmy.worldlinkfedilinkEnglisharrow-up1·6 days agoThis is a big difference between privacy and security.
minus-squareTramort@programming.devlinkfedilinkEnglisharrow-up1·6 days agoAgreed But you can’t have privacy without security, and any privacy brand must have security in their bones.
minus-squareclaudiop@lemmy.worldlinkfedilinkEnglisharrow-up5·6 days agoYou can’t encrypt anything without a key. This is the key. If it wasn’t in plaintext then it would be encrypted. Then you’d need a key for that. Where do you put it? Phone OSs have mechanisms to solve this. Desktop ones do not.
minus-squarebreadsmasher@lemmy.worldlinkfedilinkEnglisharrow-up7·7 days ago unforgivable yeah absolutely agreed
Kinda should have been in the headline
It is a super important detail, but it’s still unforgivable for an app that expects privacy to be part of its brand identity.
This is a big difference between privacy and security.
Agreed
But you can’t have privacy without security, and any privacy brand must have security in their bones.
You can’t encrypt anything without a key. This is the key. If it wasn’t in plaintext then it would be encrypted. Then you’d need a key for that. Where do you put it?
Phone OSs have mechanisms to solve this. Desktop ones do not.
yeah absolutely agreed