The signal has always been considered This Due to its open source nature, it can replace the security awareness of WhatsApp and Co., but the non-profit organization behind the chat application does not always adhere to its original open source commitment. As reported by the German publication Golem, although Signal regularly releases the code of its client application, it has failed to update its Github repository for its servers for nearly a year-although earlier today, the company launched an update to the latest version .
The repository is full of complaints from the open source community asking why Signal no longer releases changes to its server code, and before this latest version, the latest released code dates back to April 20, 2020. Since March 1
Since end-to-end encryption is implemented in the open source client application and the Signal protocol, the security of communication is guaranteed, while the closed source server application can prevent forks and prevent anyone from reviewing the latest version or creating their own. Signal server. For an open source project, this will have a profound impact-if others are not satisfied with the direction Signal is heading, others will not be able to use the code to create their own independent platforms. The latest actions, such as failing to release the latest source code, are precisely why someone originally wanted to derive.
At the same time, the company’s website is still proud of the famous quote of Twitter CEO Jack Dorsey, because the service is open source and peer-reviewed, so it recognizes the service and calls it “the key to build A refreshing model of service”. Having open source customers is still great and much better than anything Facebook offers. It’s worth emphasizing that Signal’s customers and their agreements are publicly available. Still, the nearly one-year delay in server source code release and radio delays are frustrating, especially if you rely on online security and anonymity.
Earlier today, Signal started publishing the latest version of its server code to Github, and version 5.4.8 is now available, although this solves the pressing problem, it still cannot explain the long delay between versions as we can see.
Confidentiality may be related to the new payment feature announced earlier today and efforts to hide it during development, but the lack of communication regarding delays between releases is still a problem at best.
The updated version is now available on Github
Although Signal never responded to our query, the company eventually released the latest version of the Signal Server code to Github. (Thanks to everyone who let us know, because Signal does not.)
Our report has been updated.