Don’t Use Session (Signal Fork) - Dhole Moments
soatok.blog
Last year, I outlined the specific requirements that an app needs to have in order for me to consider it a Signal competitor. Afterwards, I had several people ask me what I think of a Signal fork c…
  • vollkorntomate@infosec.pubEnglish
    40·
    2 days ago

    […] it uses the X25519 public key… as a symmetric key, for AES-GCM.
    […] anyone that knows the public key can decrypt it.

    Ouch.