Meredith Whittaker@mer__edith
Hi!✌️Personally, I’m not a fan of vibes-based trust. First VERIFY, then trust, is my motto.
Which is why Signal is open source. We want everyone to be able to inspect our code, and our encryption protocol, and see for themselves the lengths we go to to protect your comms and collect as close to no data as possible. Many eyes make secure code, and we are grateful to all of the deep experts who spend their time looking closely at our repos and reporting issues when they find them.
We also don’t think it’s responsible to run critical infrastructure—like Signal—without providing a means of validating its integrity (although sadly, many do). Open source should be the rule, not the exception.
Signal is trusted by the security and hacker community, and hundreds of millions of others, BECAUSE they can examine it, and because on examination, it has shown to be robust, private, and secure–for over a decade.
A lot of major tech platforms also trust the Signal Protocol for the same reason–they’ve scrutinized it, and it’s proven to be robust. Over 3 billion people communicate every day on services that use the Signal Protocol–it’s the gold standard in the industry for a reason, and that reason is that it’s been inspected, and verified, and it has stood the test of time.
So in short, our public code, our tech, and our commitment to robust privacy are what we lead with, not marketing or promises. We don’t ask people to like us, or agree with us. We ask that you check our work, or ask those who you trust to check it, and make your own call. This is the future of tech that we believe in, and we’re proud to do our part to lead by example. ❤️
Check our work here: github.com/signalapp
