Signal Protocol

[Drew Dennison]

I love encrypted messaging apps but I have concerns about using PGP given the problems that there is no Forward Secrecy. This is a pretty concerning issue given that there are no protections of all of a user's chat messages if the government ever recovers the private key. The developers over at Signal have thought through all these (and many more) issues and created the Signal Protocol and has been formally audited

I would love if felony used the official javascript implementation or at least added a Security.md file to the root of the project saying the protections offered by felony so users can make an informed decision about if felony meets their security and privacy needs