Post #1241081
2025-12-17 20:22 UTC
@Aquilla @signalapp
While the location of a privacy-focused service does matter, the technology behind it matters even more. Laws can change, and shift their stance on privacy at any moment.
What truly makes Signal strong isn’t where it’s based, but how it’s built: end-to-end encryption and virtually zero metadata retention. These design choices mean that even if a government demanded data, Signal simply wouldn’t have anything meaningful to hand over.
Replies (1)
-
@Aquilla@digitalcourage.social 2025-12-17 20:32
@hxrdking@mastodon.social @signalapp@mastodon.world Good point, but code doesn’t exist in a vacuum. Location determines who holds physical power over the infrastructure. The issue isn’t the past ('zero retention'), but the future: Under US law (FISA, CLOUD Act), companies can be forced via gag orders to implement real-time surveillance (live logging of IPs/metadata) or even modify code. Encryption won't save you if metadata is siphoned off at a central point (often AWS/Google servers). True sovereignty requires both: strong crypto AND a secure legal jurisdiction. #Privacy #DataSovereignty #Signal #InfoSec #Surveillance #CyberSecurity