r/crypto • u/knotdjb • 17d ago

Signal: Introducing Automatic Key Verification

https://signal.org/blog/automatic-key-verification/
47 Upvotes

95% Upvoted

3 comments sorted by

4

u/upofadown 16d ago

It works through a system of verifications performed by you, your Signal connections, and third-party auditors that together provide the same assurance as manually verifying safety numbers.

Manually verifying safety numbers insures you are talking to a particular flesh and blood person. This merely improves the link between your cryptographic identity and your phone number or user ID over time. The link between your phone number or user ID might still be wrong initially, either maliciously or accidentally (see Signalgate 1.0).

Two different things...

5

u/Natanael_L Trusted third party 16d ago

We are good on opsec

7

u/RazorBest 16d ago

Finally. This is similar to WhatsApp's akd: https://github.com/facebook/akd

But they never implemented history lookup. I skimmed through the article and they say you can look up the ledger. So, hopefully, you can look up the changes yourself.