• 42 Posts
  • 659 Comments
Joined 2 年前
cake
Cake day: 2023年7月1日

help-circle









  • m-p{3}@lemmy.catoPrivacy@lemmy.mlTM Signal
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    1 个月前

    That’s the point of digitally signing the app, to ensure its authenticity and integrity. TM and others wouldn’t be able to resign the modified app with the Signal Foundation signature.

    EDIT: Yeah after thinking more about it it’s not a trivial problem, as you need to assume that the endpoint is inherently untrusted.


  • m-p{3}@lemmy.catoPrivacy@lemmy.mlTM Signal
    link
    fedilink
    arrow-up
    9
    ·
    edit-2
    1 个月前

    At the moment you can’t. The only realistic way I could see that happening is if the servers would check the app’s digital signature and refuse the app from communicating with the official infrastructure if it didn’t match.