Signal under fire for storing encryption keys in plaintext
stackdiary.com
Popular encrypted messaging app Signal is facing criticism over a security issue in its desktop application. Researchers and app users are raising
  • refalo@programming.dev
    158·
    4 months ago

    How in the fuck are people actually defending signal for this

    Probably because Android (at least) already uses file-based encryption, and the files stored by apps are not readable by other apps anyways.

    And if people had to type in a password every time they started the app, they just wouldn’t use it.

    • uis@lemm.ee
      2·
      4 months ago

      AFAIK Android encrypts entire fs with one key. And ACL is not encryption.