The last contribution to #Signal's server software was on April 22, 2020. Due to the sudden commit drop to literally 0 it is no longer possible to seriously call current Signal versions fully open-source.
That has no effect on the messenger's end-to-end encryption or its overall security but it does compromise the trust in the Signal Foundation, especially when considering that they did not give any reason for not disclosing the source code.
The German tech magazine Golem shares my opinion:
"Signal-Server nicht mehr Open Source"
("Signal's server not open-source anymore")
The situation regarding #Signal's source code which hasn't been updated for about a year gets weirder and weirder:
When you open its commit history on 🔗 https://github.com/signalapp/Signal-Server/commits/master, #GitHub now displays tons and tons of commits from the last months that fill the gap.
Is it possible that Signal has suddenly disclosed all the server updates to the public? Maybe due to criticism?
Everyone is welcome as long as you follow our code of conduct! Thank you. Mastodon.cloud is maintained by Sujitech, LLC.