Recently discovered this. Molly supports link with existing device just like on signal desktop. It even has benefit of getting entire chat history unlike signal desktop. Just restore the signal backup file during setup and then click link with existing device. Then scan with you primary phone. Beauty of open source. Molly: https://molly.im/

  • muggedTassi@feddit.de
    link
    fedilink
    arrow-up
    0
    ·
    11 months ago

    Is there any real security-minimizing reason why it’s not wanted by the official app to have multiple mobile devices linked to one Signal account? (I’m not even talking about a second phone with another SIM card, I just wanna use it on my tablet).
    I would appreciate a simple/ELI5 style explanation if there is one, I don’t work in IT.

  • zShxck@lemmy.ml
    link
    fedilink
    arrow-up
    0
    ·
    11 months ago

    I’m using molly for several months now it is really nice but recently I dive myself in XMPP and it is superior to molly/signal just because XMPP servers are auditable amd you can actually see if the server is using encryption or not while signal servers are closed source unfortunately, it’s their only flaw

    • jet@hackertalks.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 months ago

      The signal source code is open source, it is hard to prove that the servers are running the source code that’s published, and we know they have admitted to having source code they don’t publish for anti-spam purposes.

      But you could take the signal server source code and stand up your own signal servers today.

      • Free Palestine 🇵🇸@sh.itjust.works
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        11 months ago

        The Signal protocol is built in a way where you don’t have to trust the server. The servers could be run by the NSA, it wouldn’t matter. Especially now that the Signal protocol uses post-quantum cryptography.

        • ris@feddit.de
          link
          fedilink
          arrow-up
          0
          ·
          edit-2
          7 months ago

          Nah, some parts are build in a way where you have to trust the server for no reason. Sealed sender, Not to make a mitm if you just trust the keys and not validate them