tank on Nostr: Unfortunately a different messaging app or encryption protocol wouldn‘t solve the ...
Unfortunately a different messaging app or encryption protocol wouldn‘t solve the fundamental problem Signal faces.
Even a Nostr based app would require trusting the app‘s vendor to build the correct source code on iOS.
Until Apple adds support for reproducible builds to iOS, the only way to ensure E2EE for any app’s user base would be to constrain usage to Android.
Jon Callas (co-founder of PGP Corp and Silent Circle) wrote a great post about this in his Reply to Zooko:
https://www.silentcircle.com/blog/reply-to-zooko/ At least on Android we have reproducible builds. It‘s mainly on iOS where we need to trust app store binaries :/
https://github.com/signalapp/Signal-Android/tree/main/reproducible-builds
Published at
2024-05-07 22:15:32Event JSON
{
"id": "10ce714923d988b71dbdc1d36d04f1b4e652990058c74bf032c20d76b468ab95",
"pubkey": "311b497635856767ff5c1cefa2b8c5c875ce184ae4876da9279e829ba01dd129",
"created_at": 1715112932,
"kind": 1,
"tags": [
[
"q",
"035415468ce6e99e09d4349fe413e6530b0e1016e19cde8902dbb277026d84e9"
],
[
"p",
"311b497635856767ff5c1cefa2b8c5c875ce184ae4876da9279e829ba01dd129"
],
[
"r",
"https://www.silentcircle.com/blog/reply-to-zooko/"
]
],
"content": "Unfortunately a different messaging app or encryption protocol wouldn‘t solve the fundamental problem Signal faces.\n\nEven a Nostr based app would require trusting the app‘s vendor to build the correct source code on iOS.\n\nUntil Apple adds support for reproducible builds to iOS, the only way to ensure E2EE for any app’s user base would be to constrain usage to Android.\n\nJon Callas (co-founder of PGP Corp and Silent Circle) wrote a great post about this in his Reply to Zooko:\n\nhttps://www.silentcircle.com/blog/reply-to-zooko/ nostr:note1qd2p235vum5euzw5xj07gylx2v9suyqkuxwdazgzmwe8wqndsn5svkuttm",
"sig": "dc25258ab02392f3de4422b26395c1562f2bde2bb545bdc869c74be1769a24815ce7502f8af456d5ebcb687f232de2a876194e4e12fbb4b9ba0ee39af367a1dd"
}
