Skip to content
theregister·

🔒Signal Launches AKV for Secure Key Verification

Signal's New Feature Ensures You're Chatting with the Right Person

TL;DR

Signal launches Automatic Key Verification (AKV), making it easier for users to ensure they are chatting with the correct person. Third-party auditors like Cloudflare and Trail of Bits verify Signal's key transparency server.

Signal has introduced Automatic Key Verification (AKV) to make sure you're chatting with the right person, simplifying a previously complex process. Users can now tap on a contact’s profile, navigate to 'View Safety Number', and automatically verify their encryption keys without manual checks. Behind this is Signal's new architecture for detecting tampered public keys using an open-source ledger system. Third-party auditors Cloudflare and Trail of Bits regularly check the integrity of Signal's key transparency server, ensuring it remains uncompromised. However, AKV still requires users to manually verify each contact’s identity every time they want to chat.

Signal Launches AKV for Secure Key Verification — theregister

Key Points

1

Automatic Key Verification (AKV) simplifies key verification in Signal's app, making it more user-friendly.

2

Third-party auditors Cloudflare and Trail of Bits verify the integrity of Signal's open-source key transparency server weekly.

3

Signal’s new architecture uses a ledger system to track public keys, ensuring no tampering occurs between updates.

4

Users can monitor their own ledger entries via the Signal app, which checks automatically for any changes or tampering.

5

AKV doesn't work if you don’t have your contact's phone number and requires users to manually verify each time they want to chat.

Why It Matters

If you're using Signal for secure communications, AKV simplifies key verification but still leaves room for manual checks. Users must regularly monitor their ledger entries via the app to ensure security remains intact.

SignalAKVkey transparencyCloudflareTrail of Bits

Frequently Asked Questions

Why does this matter?

If you're using Signal for secure communications, AKV simplifies key verification but still leaves room for manual checks. Users must regularly monitor their ledger entries via the app to ensure security remains intact.

What happened?

Signal launches Automatic Key Verification (AKV), making it easier for users to ensure they are chatting with the correct person. Third-party auditors like Cloudflare and Trail of Bits verify Signal's key transparency server.

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.

Join 2,900 builders reading daily.

Also get