I like Signal and believe it is secure enough for most people. Is it secure enough to send your Bitcoin keys over? Hell no, but it's certainly better than SMS. Likewise, if you're someone who has enemies willing to spend $10,000 to install Pegasus onto your phone, Signal is also not secure enough for you.

Replies (4)

This is a great common sense way to teach thinking in threat models. But here's where it breaks down: When everybody is using a tool, everybody has to use it. So we have to push for high security levels, because, to a certain extent, security is collective. Systemic security is achieved by bukding for the highest common threat model by default. View quoted note →