• 212 Posts
  • 2.9K Comments
Joined 2 年前
cake
Cake day: 2023年7月1日

help-circle








  • m-p{3}@lemmy.catoPrivacy@lemmy.mlTM Signal
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    4 天前

    That’s the point of digitally signing the app, to ensure its authenticity and integrity. TM and others wouldn’t be able to resign the modified app with the Signal Foundation signature.

    EDIT: Yeah after thinking more about it it’s not a trivial problem, as you need to assume that the endpoint is inherently untrusted.



  • m-p{3}@lemmy.catoPrivacy@lemmy.mlTM Signal
    link
    fedilink
    arrow-up
    8
    ·
    edit-2
    4 天前

    At the moment you can’t. The only realistic way I could see that happening is if the servers would check the app’s digital signature and refuse the app from communicating with the official infrastructure if it didn’t match.