logoalt Hacker News

SergeAxtoday at 1:27 PM3 repliesview on HN

Probably stupid question: why won't they e2e-encrypt push notifications too? The vector is obvious and has been open since forever.


Replies

0x62today at 1:36 PM

Signal does not send any sensitive information in push notifications sent via APNs [0]. This story concerns the local OS cache of push notifications, which are triggered after E2E decryption has occurred.

[0] https://mastodon.world/@Mer__edith/111563865413484025

tbrownawtoday at 1:48 PM

The "e" in e2e encryption is a computing device, not the device's user's brain.

show 1 reply