Trail of Bits operates one of three independent auditors for Signal's Automatic Key Verification feature, which detects compromised servers that could serve fake public keys to users. Their auditor continuously checks that the key map is globally consistent and well-formed, preventing man-in-the-middle attacks without requiring manual safety number comparison.
Background
Signal is a widely-used end-to-end encrypted messaging app that previously relied on users manually verifying safety numbers to detect key substitution attacks. Automatic Key Verification is a newer feature introducing key transparency to reduce the burden on users.
- Source
- Lobsters
- Published
- Sep 12, 2026 at 07:28 PM
- Score
- 7.0 / 10