Public-Private keychains are well understood. The Signal protocol is robust, but it is useless if the message carrier can aquire your private key.
The security provided by end-to-end encryption (using private/public keypairs) is pointless if the MITM has your private key.
And yes, you do have to install Signal from the Play Store. The only alternatives are 1) builiding the app yourself, 2) downloading a the apk from a third-party (which is ultimately from the play store). Signal USED to be on open source app sotred like F-Droid, but has since been REMOVED and kept solely on Google and Apple's app stores.
Additionally, you can't even install the Signal app on your Desktop without first connecting it to your phone
To use the Signal desktop app, Signal must first be installed on your phone. (signal.org)
Also, let me know if this doesn't raise and eyebrow for you
$50 million investment into signal from WhatApps founder (whatsapp now owned by facebook): https://archive.vn/eVU5f
Again the Signal protocol is very strong IF the message carrier doesn't have your private key. If they do, you may as well be sending clear-text messages.
Still wrong, just installed it directly on an open source phone, no fdroid no playstore.
how exactly did you install it?
Do your own research, dont trust my words.
(post is archived)