THREAT OPS › Threat News › How Trail of Bits helps verify the integrity of your Signal chats
How Trail of Bits helps verify the integrity of your Signal chats
<p>Every Signal chat starts the same way: the client asks the Signal server for the public key associated with your contact’s phone number. But how do you know the server gave you the right key? A compromised server could provide a false public key, allowing the client to encrypt messages to an attacker rather than the intended recipient.</p> <p>Until now, the only way to detect such malfeasance w
Indicators of compromise
- 7fe5d91de235188486d8fb836a6da37e625e2b10eb6d144185b9364cc83cbbb6sha256
- 622d0d52471f3cc9215fe4e9abaac1970018f79csha1
- https://signal.org/blog/automatic-key-verificationurl
- https://support.signal.org/hc/en-us/articles/360007060632-What-is-a-safety-number-and-why-do-I-see-that-it-changedurl
- https://support.signal.org/hc/en-us/articles/10223569377562-Automatic-Key-Verificationurl
- https://trailofbits.com/contact/url