undefined | Better HN

0 pointscroes5y ago0 comments

You mean the signal protocol.

0 comments

The protocol isn't really the root issue with interoperability. It's identity. As a start you should be able to easily use your verified identities across the different systems.

Signal would probably be a poor base for an interoperability standard. Which flavour would you use? Signal Messenger, Matrix, OMEMO and allegedly WhatsApp all use the Signal protocol but can not interoperate at all.

Signal Protocol is also more complex than it needs to be. It has two levels of forward secrecy for example. It is basically all the crypto geekery of the last few decades packed into a instant messaging protocol. Something intended as an interconnection standard should be as simple as possible.

croesOP5y ago

Simple as possible? Than use email. The security of the signal protocol is necessary if you look who all wants to read the data. The EU wants to practically abolish encryption so that intelligence services and authorities can read all messages.

upofadown5y ago

In general, more complicated cryptography is less secure than simple cryptography. More stuff to attack.

1 more reply

j / k navigate · click thread line to collapse

0 comments

upofadown5y ago

The protocol isn't really the root issue with interoperability. It's identity. As a start you should be able to easily use your verified identities across the different systems.

croesOP5y ago

upofadown5y ago

In general, more complicated cryptography is less secure than simple cryptography. More stuff to attack.

1 more reply

j / k navigate · click thread line to collapse