Signal is open source, so our code is regularly scrutinized in addition to regular formal audits. We also constantly monitor security@signal.org for any new reports, and we act on them with quickness while also working to protect the people who rely on us from outside threats like phishing with warnings and safeguards.
This is why Signal remains the gold standard for private, secure communications. 5/
@signalapp I disagree because your platform is #proprietary, #SingleVendor, #SingleProvider and doesn't allow for #SelfHosting, #SelfCustody of all the Keys and you demand #PII in the form of a #PhoneNumber which can be used.to track users down!
If #Signal was as secure as claimed, it would've been shut down like #EncroChat, #SkyECC & others...
@kkarhan Signal is literally open-source, meaning its source code is public, not proprietary: https://github.com/signalapp. Signal does not hold any user's secret keys.
@pixelcode @kkarhan #OpenSourceInitiative has gone to great lengths to try to standardize the definition of "open source", including filing trademarks. Including proprietary libs fails their definition of #OpenSource For this reason, many are now using the term #SourceAvailable for things like Signal.
@eighthave @kkarhan I wrote “open-source”, not “Open Source ®”. I don't care about the opinion of the Open Source Initiative ®.