@tallship I disagree on the "farming contact" part. #signal goes to extreme lengths[^1] to carry out contact discovery in a private fashion. Plus, they're working on a new feature that would allow users to prevent their accounts to be searchable/discoverable, allegedly coming out the same time as usernames.
All Signal knows about their users are: the time of account creation and that of the last connection to the server[^2].
[^1]: https://signal.org/blog/building-faster-oram/
[^2]: https://signal.org/bigbrother/
@ilyess
Thank you for that. It was a really good read. 🙂
But still, that's really just an elegant way to farm particular aspects of ones identity and then hand it off to third parties; in particular, any other signal user that has your DID in their contact database, while absolving themselves (Signal) of any blame because they haven't revealed those identifiers to themselves.
It may sound innocent enough, but I actually see this as a much more egregious trespass.
#tallship
⛵
.
@jay