Signal's code is open-source but do we have a way to verify that the server's code used in production is exactly the same as the open-sourced one? Without any added backdoors or changes.
Also a centralized social service is an issue by design. Because at some point the government(s) might censor the service or impose changes.
I will stick to decentralized alternatives like simpleX or nostr.
Bruce Høpper
npub12e8…re7a
2024-02-22 02:21:06
in reply to nevent1q…ccxp
Author Public Key
npub12e8zrykjcn0nxgjvzhtc0ngpwt7gcln20t7k00xrlr35gltktxqsuxre7aPublished at
2024-02-22 02:21:06Event JSON
{
"id": "e8c30a23fa731a0822cfcef98b5a2d7a4e6d06141082f7f848e694d632c2d0cc",
"pubkey": "564e2192d2c4df33224c15d787cd0172fc8c7e6a7afd67bcc3f8e3447d765981",
"created_at": 1708564866,
"kind": 1,
"tags": [
[
"e",
"634bcd18a432ef1f12ea0cbc3a8f2fae88242eb8e4ec809268051c0460f8a4bb",
"",
"root"
],
[
"p",
"04c915daefee38317fa734444acee390a8269fe5810b2241e5e6dd343dfbecc9"
]
],
"content": "Signal's code is open-source but do we have a way to verify that the server's code used in production is exactly the same as the open-sourced one? Without any added backdoors or changes.\n\nAlso a centralized social service is an issue by design. Because at some point the government(s) might censor the service or impose changes.\n\nI will stick to decentralized alternatives like simpleX or nostr.",
"sig": "f97e5e98dfdd1984e02c0e152f1f2164422035d2992be78474224d13b3fe1c820621b21fc0a69abe3e5abd559a3747f8dea8312f746ea5380d0ccfebdc9b3bf1"
}