ContactDiscoveryService VS Signal-Android

[1] https://signal.org/blog/private-contact-discovery/

Signal uses SGX for remote attestation, which presumably lets the client verify that the code running on the server is a build of the OSS code and not a modified version. But I don't know the details or if this is reliable.

SGX and remote attestation described here:

https://signal.org/blog/private-contact-discovery/

Signal does private contact discovery and the effort they've gone to to do this is quite impressive.

TEEs have numerous privacy-enhancing applications that may benefit users. One of them is, as discussed earlier, private contact discovery; the Signal application uses a contact discovery service enhanced using Intel SGX, a TEE technology, to protect its users' privacy. A similar application of TEEs is performing malware analysis in a remote cloud service, so that the service may not identify users by the contents of their devices, such as the applications they have installed, especially important as 98.93% of users may be uniquely identified by the list of applications they have installed.

Signal (or, more accurately, one of its predecessors) used to use client-side private set intersection for contact discovery, but this scales poorly [1].

Now they use a solution based on Intel SGX and server-side trusted computing [2].

[1] https://signal.org/blog/contact-discovery/

[2] https://signal.org/blog/private-contact-discovery/

The fork by johanw666 is most likely not going to keep SMS support, see here and here.

there is already Singal fork with no APK expire whrere you can keep using SMS as long as you want

https://github.com/johanw666/Signal-Android

Just use Johann's fork with SMS support and no APK expiration and don't update it. This would either buy you some months before proper alternative will be introduced or at best work infinitely.

https://github.com/johanw666/Signal-Android/releases

Just use Signal fork with SMS feature and don't update it, this fork should keep working even if Signal tries to force you to update.

I've been looking into this fork and hopefully the dev ends up keeping SMS : https://github.com/johanw666/Signal-Android

Signal Fork by Johanw666 is it safe right? I've been using it for long time