105

Signal under fire for storing encryption keys in plaintext(stackdiary.com)

posted
*
by
Avatar
Recant@beehaw.org
in
Avatar
foss@beehaw.org
46 comments
hidereport

As mentioned in the comments, plain text keys aren’t bad because they are necessary. You have to have at least one plain text key in order to be able to use encryption

Sort:
HotTopControversialNewOld
You are viewing a single thread.
View all comments View context
Avatar
ericjmorey@programming.dev
12 points

A secure enclave can already be accessed by the time someone can access the Signal encryption keys , so there’s no extra security in putting the encryption keys in the secure enclave.

permalink
report
parent
reply

Free and Open Source Software

!foss@beehaw.org

Create post

If it’s free and open source and it’s also software, it can be discussed here. Subcommunity of Technology.

This community’s icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

Community stats

  • 685

    Monthly active users

  • 470

    Posts

  • 2.6K

    Comments

Community moderators