Recently discovered this. Molly supports link with existing device just like on signal desktop. It even has benefit of getting entire chat history unlike signal desktop. Just restore the signal backup file during setup and then click link with existing device. Then scan with you primary phone. Beauty of open source. Molly: https://molly.im/

You are viewing a single thread.
View all comments
7 points

I’m using molly for several months now it is really nice but recently I dive myself in XMPP and it is superior to molly/signal just because XMPP servers are auditable amd you can actually see if the server is using encryption or not while signal servers are closed source unfortunately, it’s their only flaw

permalink
report
reply
5 points

The signal source code is open source, it is hard to prove that the servers are running the source code that’s published, and we know they have admitted to having source code they don’t publish for anti-spam purposes.

But you could take the signal server source code and stand up your own signal servers today.

permalink
report
parent
reply
5 points

it is hard to prove that the servers are running the source code that’s published

impossible*

permalink
report
parent
reply

The Signal protocol is built in a way where you don’t have to trust the server. The servers could be run by the NSA, it wouldn’t matter. Especially now that the Signal protocol uses post-quantum cryptography.

permalink
report
parent
reply
1 point

And how do I tell may client to use only a specific server?

permalink
report
parent
reply
3 points

If your going to run a independent signal server cluster, you will also need to modify the client applications to connect to your cluster.

You probably would find the molly developers happy to accept a push request to have some configurable backend selection.

Session demonstrates this is possible.

permalink
report
parent
reply
2 points

Your client encrypts and decrypts everything, so it is actually not a privacy concern regarding message content when we don’t know what the server does.

permalink
report
parent
reply
0 points

The server could decrypt or could be machines attached to the server that store data

permalink
report
parent
reply
3 points

Your private key stays at the client, the server doesn’t get it. Verifiable by the source code of your client

permalink
report
parent
reply

The Signal servers don’t do the encryption, it’s done on your phone. That’s how end-to-end encryption works. Also, Signal’s Server code is FOSS: https://github.com/signalapp/Signal-Server

permalink
report
parent
reply

Privacy

!privacy@lemmy.ml

Create post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

Community stats

  • 3.9K

    Monthly active users

  • 3K

    Posts

  • 78K

    Comments