HACKER Q&A
📣 palata

Why aren't governments using Signal with proxies?


I have been wondering this for a while, but given the current geopolitical situation, it feels even more relevant than before.

Governments (and companies, actually) should not trust servers controlled by other governments for their communications. Typically, all companies using Microsoft Teams, GMail or Slack expose all their communications to those companies and to the US government.

Even when using e2ee services like WhatsApp, metadata are leaked (e.g. which politician is writing to which other politician, and when).

Signal is obviously a good candidate for such sensitive communications, with Sealed Sender and soon Key Transparency. However, metadata may leak at the network level (I believe Signal servers run on AWS, so Amazon could look at the IPs of the messages and deduce who is talking to whom, to some extent).

Now, why wouldn't governments run Signal proxies? That would completely solve the problem of the leaked IPs, right? They could even go fancy an integrate some kind of mixnet feature if needed. Signal already supports proxies, so it would just be a matter of telling their employees to connect through the proxy. Or even build a special version of Signal that only connects through the government proxy.

Would that be a bad idea? Why is nobody doing that?


  👤 Not4Hire Accepted Answer ✓
If they are/were doing exactly that, would we know and could we find out? Im not sure that they aren't already; and an important part of deploying some securirty like this should be: don't disclose that youre doing this.

👤 cepc912
What if theyre using their own thing? Like a more secure Signal.

👤 stop50
The Bundeswehrmessenger(German Army) is based on Matrix