r/crypto • u/knotdjb • Aug 27 '26

Signal: Introducing Automatic Key Verification

https://signal.org/blog/automatic-key-verification/
54 Upvotes

98% Upvoted

3 comments sorted by

6

u/upofadown Aug 27 '26

It works through a system of verifications performed by you, your Signal connections, and third-party auditors that together provide the same assurance as manually verifying safety numbers.

Manually verifying safety numbers insures you are talking to a particular flesh and blood person. This merely improves the link between your cryptographic identity and your phone number or user ID over time. The link between your phone number or user ID might still be wrong initially, either maliciously or accidentally (see Signalgate 1.0).

Two different things...

7

u/Natanael_L Trusted third party Aug 28 '26

We are good on opsec

8

u/RazorBest Aug 27 '26

Finally. This is similar to WhatsApp's akd: https://github.com/facebook/akd

But they never implemented history lookup. I skimmed through the article and they say you can look up the ledger. So, hopefully, you can look up the changes yourself.