Don’t Use Session (Signal Fork) [Article]

[ph00lt0]

Most of these things have been previously dicussed and there were also papers written on the security of session messenger earlier.

I would agree there is an issue with the lacking PFS. The arguements for them not needing it are wrong in my opinion.

Remove Session from Instant Messaging

We already do so. Unfortunately it isn’t available anymore as Elon Musk kicked me of Twitter lol but I had lengthy discussions about this all with the CTO of session a few years back. We came to the conclusion of agreeing to disagree that their measurements are to be trusted to be sufficient for lacking forward secrecy. I do not agree that the network (largely controlled by them) removes this need. The fact that they first had forwarded secrecy and then just removed it is beyond me and unaccep…