Governments in Germany, France, Poland, the Netherlands, Luxembourg and Belgium have begun rolling out their own messaging apps to prevent employees from using widely used encrypted messaging apps to share sensitive information and to shift to local alternatives that can be monitored. NATO also has its own messaging app, and the European Commission plans to launch one by the end of the year.

  • schnokobaer@feddit.org
    link
    fedilink
    English
    arrow-up
    59
    ·
    2 days ago

    While I support the initiative, this

    Both WhatsApp and Signal have faced cybersecurity challenges in recent weeks.

    statement is disingenuous, or at the very least misinformed. The recent cyber security news that involved Signal was an iOS security flaw (or backdoor) and it was merely incidental that Signal was used. Any other messaging platform with any level of security and encryption would be equally vulnerable to the phone storing your notifications unencrypted somewhere on the device.

    • poVoq@slrpnk.netM
      link
      fedilink
      English
      arrow-up
      11
      ·
      2 days ago

      Other more actual security focussed apps prevent notifications showing the message content by default. This is afaik also possible in Signal, but not the default and buried deep in the settings somewhere. Signal has a long history of prioritizing convenience over actual security, despite all their rethoric suggesting otherwise.

        • poVoq@slrpnk.netM
          link
          fedilink
          English
          arrow-up
          5
          ·
          2 days ago

          Thanks for proving my point. Not the default, in a double nested menu, and with no warning what so ever about the security implications.

      • Calavera@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 days ago

        Unless someone works in a highly secure job, this kind of app behavior is just a hindrance.

        Makes me remember that where I work we use an ALM system(like jira) that’s sends only encrypted messages which forces us to use our PIN for every single mail we read and makes it impossible to use the search function. this for mails that have absolutely nothing sensitive. I think that people who set those secure options don’t actually work with them so they don’t see how frustrating it is.

  • jenesaisquoi@feddit.org
    link
    fedilink
    English
    arrow-up
    13
    ·
    2 days ago

    The Swiss government uses Threema, which can be self-hosted. They can’t monitor the contents though.

    • gsv@programming.dev
      link
      fedilink
      English
      arrow-up
      4
      ·
      2 days ago

      Threema is great, I’m using it privately a lot. Several German authorities have set up and published variants of Element X, using the Matrix protocol in the backend.