Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I have 0 control over the Signal project in any way shape or form. The fact that Moxie advises MobileCoin has nothing to do with his work at Signal. I can't force Moxie or anyone at Signal to do anything.

Moxie and I have a close professional relationship but I'm not sure what bearing that has on asking for the code of Keybase's server to be open-sourced. That's not a biased statement, and I would say the same thing in any thread about Telegram, WhatsApp, or FB Messenger's privacy. It's all the same.

If you want trust, you have to be open source. That statement has absolutely nothing to do with Signal.

Yes I use Signal. Yes I'm a fan of the Signal team's work. No, I don't think Signal would be better off with a closed source server. Yes, I do think Keybase should open source their server.

I honestly have no idea why this is even controversial :/.



> Moxie and I have a close professional relationship but I'm not sure what bearing that has on asking for the code of Keybase's server to be open-sourced.

You have a professional relationship with the founder of one of their competitors. It's appropriate in those cases to note that you have a bias. I realize you don't think you have a bias, but that's the whole point.

> If you want trust, you have to be open source.

That's such a confusing statement, and a particularly misleading one coming from someone that works for a crpyto company.

The whole point of end to end crypto is that you don't need to trust the server.

> I honestly have no idea why this is even controversial :/.

That's the core of the problem. You have a professional relationship with the founder of Signal. If you comment on a thread about Signal, or it's competitors, we shouldn't have to click the link to your site to find that out.

Think of it as building trust...


I see. I will include that disclaimer in all threads I comment on about Signal in the future. Thanks for explaining this to me.

I've been a fan of Signal since it was RedPhone and TextSecure and my professional relationship with Moxie is quite recent in the scheme of watching the rise of his projects. I apologize if my lack of awareness was offensive, it was unintended.

Edit: Just to be clear, I don't think you need to have the server open-sourced to trust the end to end encryption of the messages, but that's just one part of the overall trust model.


I don't think any kind of disclaimer was necessary. Your point about the Keybase server being closed-source has nothing to do with Signal and is completely valid no matter what competing interests you may have.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: