Hacker News new | past | comments | ask | show | jobs | submit login

with signal I believe you can have already trusted contacts vouch for new contacts

You're thinking of PGP web of trust, Signal doesn't have that

you can have contacts send you another contact. There is no way to set up a server of public identities, but you should be able to share your own contacts.

Signal won't validate the session key via that mechanism, each pair of communicating users have to do that themselves

TIL; does this also mean that you can "fake" forwarded messages?

Applications are open for YC Winter 2020

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact