Ask HN: How do we know Signal or Telegram don't store our data on their servers?

• zre_raft

  5 2 0.0 Python

  Peer-to-peer encrypted chat using ZRE and double ratchet.

If this is a concern for you, consider using the signal protocol without a server.

CLI prototype. Can be generalized into a nice phone app.

https://github.com/adsharma/zre_raft

• Signal-iOS

  130 10,451 10.0 Swift

  A private messenger for iOS.

  

> You don't compare builds because you probably don't actually have sources

https://github.com/signalapp/Signal-iOS

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• TextSecure

  985 24,915 9.9 Java

  A private messenger for Android.

  

Signal has reproducible builds for at least Android: https://github.com/signalapp/Signal-Android/tree/master/repr...

You compare the result you get compiling the app yourself with what you downloaded from the Play Store. For iOS this might be harder

• Signal-Server

  200 8,828 9.8 Java

  Server supporting the Signal Private Messenger applications on Android, Desktop, and iOS

  

3. The client code is open source, and it seems like a good portion of the server code is open source.

Where I think Signal could go further on being the most secure, useful, and privacy-conscious messaging app/company in the world:

1. Open source ALL of the server code. They have something called Signal-Server (https://github.com/signalapp/Signal-Server) on their Github, but it's unclear if this is the server they use, or simply a server one could theoretically use to run a private Signal server.

Suggest a related project