TextSecure VS Signal-TLS-Proxy

Moxie's reasons for disallowing Signal distribution via F-droid always rang a little flat to me ( https://github.com/signalapp/Signal-Android/issues/127 ). Lots of chatter about the supposedly superior security model of Google Play Store, and as a result fewer eyes independently building and testing the Signal code base. Everyone is entitled to their opinions, but independent and reproducible builds seem like a net positive for everyone. Always struggled to understand releasing code as open source without taking advantage of the community's willingness to build and test. Looking at it in a new light after the XZ backdoor, and Jia Tan's interactions with other FOSS folk.

Signal has documentation on how to reproduce their Play Store builds and compare them with what you've installed locally:

https://github.com/signalapp/Signal-Android/blob/main/reprod...

There's nothing on Signal blog as of yet, but Signal's git repository was tagged with v7.0.0 yesterday and we can see from the commit history since the previously tagged version (v6.74.4) that there will be a setting to hide one's phone number [1], as well as disabling the previous default behavior of advertising that one is on Signal to all their contacts already using it [2].

[1] https://github.com/signalapp/Signal-Android/commit/8797236b5... (PNP stands for "Phone Number Privacy")

[2] https://github.com/signalapp/Signal-Android/commit/6097e6c30...

Signal works the same but without the user tracking from Meta/Facebook. Many people use it as well but I'm surprised that a majority sticks to WhatsApp.

Telegram and Signal solve this.

Sadly yes: Looks like an open issue 13290 for Signal, sounds like they were/are indeed still interacting through google's push notification service, wat, and per a link at that issue it was a chore for Tutanota to break away once they realised it was a problem some years ago (though at least they thought about it years ago? wtf Signal...)

Here is one: https://github.com/signalapp/Signal-Android/tree/main/reprod...

Rule 1: Posts to r/signal must relate to Signal.

I'm trying to install the Signal proxy server on my AS5104T NAS, but one of the first steps is to run a bash script, which ADM doesn't have. It only ships with /bin/sh.

A significant amount of people will go "huh, Signal will only work when my Netflix VPN is on, I wonder why that is". Signal won't just disappear.

In fact, Signal has a network of volunteers running special proxy services[1] to access Signal from countries with oppressive governments. Signal the company may leave, but Signal the app will try to stay relevant for as long as possible.

[1]: https://github.com/signalapp/Signal-TLS-Proxy

Yes, https://github.com/signalapp/Signal-TLS-Proxy/commit/461d2d1aeec601a4d62100949a227f0cef2f6154 resolved the issue for me (using a custom container). Thanks!

You were running this one?

I haven't seen a guide, but you can just look at the scripts and config files on github and manually install the nginx-proxy yourself. https://github.com/signalapp/Signal-TLS-Proxy It's just a TLS proxy.

#!/bin/bash set -euxo pipefail # update this field with the hostname of the proxy (don't put https at the start) PROXY_HOST=example.proxy.host.com PROXY_IP=$(ping -W2 -4 -q -c1 ${PROXY_HOST} | grep -m1 -oE '\([0-9\.]+\)' | head -1 | tr -d '()') || true upstreams=$(curl -sSfL https://github.com/signalapp/Signal-TLS-Proxy/raw/main/data/nginx-relay/nginx.conf \ | grep server \ | grep -oE '[^ ]+\.signal.org.*$' | tr -d ';') for host in $upstreams; do [ $host == "contentproxy.signal.org:443" ] && continue # something weird about this one, so skip it echo "Checking ${host} via ${PROXY_HOST}" curl -v -sSL --insecure --resolve ${host}:${PROXY_IP} https://${host} noproxyversion=$(curl -sSL --insecure https://${host} | cut -c 1-20 | sha256sum | tr -d '-') proxiedversion=$(curl -sSL --insecure --resolve ${host}:${PROXY_IP} https://${host} | cut -c 1-20 | sha256sum | tr -d '-') test ${noproxyversion} == ${proxiedversion} || { echo "Proxy failed for https://${host}" && exit 1; } done

People, Yall can help them Spread Christian Nationalism by turning Your device into a proxy So these Iranians can use it to access the Signal messaging app. U will need 1️⃣. a server with ports 80 & 443 available & 2️⃣. A domain name (or subdomain) that points to the server's IP address. The proxy is extremely lightweight. An inexpensive & Tiny VPS can easily handle 100s of concurrent users. Steps : SSH into your server, Install Docker, Dockers Compose & Git. sudo apt update sudo apt install docker docker-compose git. Clone the Signal TLS proxy repository : git clone https://github.com/signalapp/Signal-TLS-Proxy.git Enter the repo directory : cd Signal-TLS-Proxy

It's a bit hard to find the link to the proxy through the article, so here's a direct link: https://github.com/signalapp/Signal-TLS-Proxy

I also want to use my knowledge and server power for good things. Reading about the developments and the cencorship in iran is devastating, but I stumbled across this tweet and this repo by signal to help people in iran get the word out.