Skip to content
securitytabs

How Trail of Bits helps verify the integrity of your Signal chats

Trail of Bits

Every Signal chat starts the same way: the client asks the Signal server for the public key associated with your contact’s phone number. But how do you know the server gave you the right key? A compromised server could provide a false public key, allowing the client to encrypt messages to an attacker rather than the intended recipient.

Summary from Trail of Bits.