Post #1285752
2026-04-09 15:28 UTC
Replies (5)
-
@apftwb@lemmy.world 2026-04-09 17:52
I am no Android developer, but can’t the push notification payload be encrypted? firebase.google.com/docs/…/encryption A better question is if Signal does this already.
-
@WhyJiffie@sh.itjust.works 2026-04-11 10:10
this is not about push notifications. signal is smart enough to ot send your texts to firebase but wait a minute! I just remembered something. isnt it that they couldn’t even send you the plain text message itself through push, because only your device can decrypt it?
-
@MrSoup@lemmy.zip 2026-04-09 16:26
If you turn off notification history on Android, should be enough to avoid such “attacks”. Hiding sensitive content inside notifications only hides it in the lock screen. If your OS keeps a clear log of them, it’s useless. Edit: didn’t know Signal actually has settings to hide their own notifications. I was thinking about Android’s “hide sensitive content” setting.
-
@Jako302@feddit.org 2026-04-09 17:43
That depends on your definition of private. A push notification is pretty much just a ping that wakes up the app that is supposed to show you the notification. There usually isnt much data in that ping, so the only thing the Google firebase servers (or whatever other backend solution you use) see is a timestamp and an app. If you then disable Notification historie (default is off bzw on GraphenOS) there is no other data stored anywhere. That's metadata that every single chat service has, no matter if its E2EE or not, because that's the bare minimum they need to transmit anything at all. If that already isn't private for you then you'd have to stop using the internet or phonecalls entirely and go back to carrier pidgeons.
-
@timestatic@feddit.org 2026-04-09 19:37
Wdym push notifications are not private on Graphene??