Signal's open sourced server code hasn't been updated for over a year. Should we be concerned?
github.comEncryption happens client side, not server side, so that should alleviate some concerns however it's still worthy of discussion.
Signal is the only private messaging app that I've tried that hasn't sucked, or wasn't a privacy concern in itself.
KeeJef wrote
Yes lol, the client is making calls to endpoints on the server which don't even exist in the publicly released code. Saying all messages are encrypted avoids the question of metadata and how the server actually deals with that metadata.