

https://signal.org/bigbrother/central-california-grand-jury/
there are probably also a few other, more recent examples that i just can’t find. but the theory is the same, signal only knows a phone number in association with an account creation date and the last sent message date. everything else is encrypted. the signal protocol has been formally verified to be secure: https://cryspen.com/post/pqxdh/. signal all in all is a very competent messenger, and there’s a reason it’s being used by dissidents, journalists and activists, even if most of those people do not actually have the energy or skills to verify the internals. what does easily get you in trouble (assuming what you’re doing is troubling) is if you have a leaky contact. it’s not hard to just screenshot messages and then publish them elsewhere.







compromised servers are a known threat model, and not a threat in signal’s case