If it ask for your phone number its not private.

Signal is private, what you should differentiate is being anonymous or not. Using your usual phone number is NOT Anonymous but is PRIVATE, as in the content of your messages being only available to you and the person you're talking to

The way you get a phone number depends on you too, so you can be very much be Anonymous even if signal requires a phone number.

So, late to the party. Me Skuzi. This comment is more targeted towards your responses to user comments, but I would extend that to your entire thesis. So I decided to make an entirely new comment.

Honest questions/comments to follow:

Yes, the US govt can 'compel' a organization such as Signal to allow them to monitor/intercept encrypted messages, The government can even 'compel' a citizen to disclose their encryption key. The cost of non compliance varies from contempt of court to short term incarceration. United States v. Fricosu et al.

However, Signal would only shrug and hand them metadata. Even Signal can't decipher your messages. There are other services unrelated to Signal that operate thusly, such as VPNs, that absolutely do not keep logs and run in RAM only. Some of those VPNs have been raided and servers confiscated by multiple governments with nothing to show for their efforts. If I recall correctly mega.nz and other storage facilities operate along the same lines.

As to the requirement for a phone number, yes they do require a phone number. However, unless they've changed something recently, you can use a free or paid for, burner phone number for verification. The caveat is that if you ever have to recover your account or future verification, you may or may not have access to that number if you used a free service. So, that might be a consideration.

Also, some free services might not work while others will. If signing up for a paid account, burnerapp.com for instance, will allow you to sign up via their website, however you can't use a VPN. WiFi can be acquired at any coffee shop. If you prefer more private methods of payment for these services, there are those that accept crypto.

So, there are 'options.' You just might have to jump through a few hoops to get there.

Secondly, Signal is open source, no? The whole shebang including the protocol is open source. Where might 'they' be putting the backdoor to intercept encrypted messages? I can tell you this, the day the world finds out that the US govt has successfully cracked strong encryption ciphers, is the day you are going to see a lot of movement on this planet. From billion dollar corporations, private entities, governments, and even ne'er-do-wells on Signal.

I'm no 'fanboy', tho there is a lot to be a fan of. I'm not getting any kickbacks, compensation, or monetary advancements. If I need to be schooled, please do share.

Signal does plan to add a paid for service as well as their free service.

You can use whatever app you like, but I think this adds confusion.

Signal is private because no one can see your messages except the people you are messaging. The government can't, Signal themselves can't.

Signal is not anonymous only in the sense that the government can check if you use Signal. That's it. They can tell if you use Signal. They can't link messages to your number in any way through data requests, etc.

Not forcing anyone to use Signal, but if you choose to, you can know it is private.

(So this post is confusing privacy with anonimity basically)

Privacy and anonymity is different things

Here, go argue with this guy for a few weeks, and give us a break for a while.

This thread shows the success of Signal's PR campaigns, and how a shiny app can get people to overlook all the privacy concerns. They're just as successful as Apple at getting people to think that a US-based corporation hosted on Amazon's servers and subject to national security letters, whose privacy model is "just trust us with your phone number", is in any way secure.

I am a huge fan of SimpleX and their removal of user IDs. I think it's a brilliant solution, and wish that SimpleX was recommended more than Signal.

Thank you! Finally someone that also sees Signal as privacy invasing!

People dont realize that you may as well hand over your social security number when you pass out your phone number.

Removed by Moderator — Modlog

If Signal isn't private, then why it is recommended over WhatsApp, Matrix and over SimpleX?

Be specific: what does Signal divilge about me to outsiders besides "I have used Signal"?

I'm ready to be called milquetoast, and while I see where this comes from, it comes off idealistic if we are to communicate with people in the present day in any practical way. Do not forget how much of an improvement it already is over the likes of proprietary messaging apps and how much effort it already is to move people to Signal. It is surprisingly difficult for common folk to grasp the concept of anything but a phone number when it comes to messaging apps.

Yes, phone number should be optional for easy contact discovery, not mandatory. As Threema. You have to provide your ID when buying a sim card.

Do you think your phone number is private?

2FA is an important security layer, if the service, after sending you the activating SMS with the code, delete your number (normal in serious services), it's also not an privacy problem. In big us corporations on the other hand, it is, eg.Google store tour number and also probably share it, there 2FA is not an option. Instead a number, some services also admit alternatively a second e-mail account to receive the activation code, there, if you have doubt, you can use an disposable mail, so there isn't any privacy problem.

You can also get a phone number in a number of ways without it being connected to your identity. You can use voip services or buy a phone and a SIM in cash. I still think this is a good think to point out for all the people who use signal or other services with a phone number directly connected to their identity.

Been saying this for many many years and always get blank stares in response. All the more annoying when its for use in groups that are all about privacy and they only want to use telegram.

However, it does make me happy to finally see someone else say it. So, thanks for that.

lol try signing up for an email account today without tying a phone number to it or another established email account. It's incredibly difficult.

You might be able to create an account, but then all "3rd party services" (e.g. creating accounts on absolutely fucking anything) will be blocked and your account will be either restricted or forced to submit a kind of verification that doxes you to lift said block, probably.

I found a single sketchy provider that would take verifications from proton mail that allowed me to then create more accounts, but I had to try over a dozen mail providers before I found the obscure one that did not require any pre-existing accounts, phone numbers or identification documents to just create an email to simply sign up for any web forum, service or basically do anything most people do with email. Everything ends up linked to each other at some point.

There's just no privacy anymore. The ones who think there is are probably not as private as they really think they are today.

simplex is shady af and literally run by some sus crypto rugpull bums. best to use xmpp and irc. they have been existing for many years and still standing strong.