#security #encryption #messenger #signal

I've mentioned before that Signal is the gold standard for encrypted communication. It's open source and has all important features that other messengers also have (maybe except for a web interface). But the verification process makes it hard to impossible for some people who might need a secure messenger the most to use it: people in countries with oppressive governments.

When you install the app and try to register, Signal sends you an verification code via SMS or voice call to a cell phone number. Without this code you are unable to complete this registration process. This makes it very easy for powerful actors who control the whole infrastructure (in other words: governments) to filter these messages. The Signal developers have reasons for doing that, but when they are calling on people to set up proxies so people can use Signal in countries where they can't even register, this might be the right time to rethink the current verification process.

Threema implemented an alternative solution which shows that there are better ways to handle this process.