searchtwitterarrow rightmail strokearrow leftmail solidfacebooklinkedinplusangle upmagazine plus
Help Net Security - Daily information security news with a focus on enterprise security.
Help Net Security - Daily information security news with a focus on enterprise security.
  • News
  • Features
  • Expert analysis
  • Videos
  • Reviews
  • Events
  • Whitepapers
  • Industry news
  • Product showcase
  • Newsletters
Zeljka Zorz
Zeljka Zorz, Editor-in-Chief, Help Net Security
February 15, 2017
Share

Secure comms app Signal now offers encrypted video calls

Users of secure chat and voice call app Signal will soon be able to enjoy the option of encrypted video calls.

Signal encrypted video calls

For the moment, only calls between Signal users who have both enabled the option (Signal Settings -> Advanced -> Video calling beta) will use this new calling system, and the feature – as noted in the settings – is still in beta.

iOS users who want to test the option out but have their iPhone linked to their iCloud accounts are instructed to disable the feature’s use of Apple’s CallKit framework for VoIP calls – if they don’t want some of their call metadata getting stored on Apple’s servers.

How come?

“CallKit offers a native calling experience to VoIP apps like Signal,” Open Whisper Systems developer and Signal creator Moxie Marlinspike explained.

“As well as being able to answer calls directly from your lock screen, you’ll also see Signal calls in the system’s ‘Recent Calls’ list. This is because iOS treats CallKit calls like any other call, however that also means some information will be synced to iCloud if enabled. This information includes who you called and how long you talked.”

CallKit use can be disabled in Signal Settings -> Advanced -> Use CallKit. Disabling it on your phone means that your Signal-using contacts’ phones will also be prevented from leaking you call metadata to Apple.

Marlinspike told Wired that they have still not decided whether the next version of Signal will integrate CallKit by default or as an opt-in feature, and how they will put the option to users if the opt for the latter.

He has also shared more technical details about how they are handling the security of VoIP calls.

More about
  • data leak
  • encryption
  • metadata
  • privacy
  • secure communications
  • Signal
Share this

Featured news

  • 3 business application security risks businesses need to prepare for in 2023
  • Researchers release PoC exploit for critical Windows CryptoAPI bug (CVE-2022-34689)
  • Attackers use portable executables of remote management software to great effect
Guide: How virtual CISOs can efficiently extend their services into compliance readiness

Sponsored

eBook: 4 ways to secure passwords, avoid corporate account takeover

Here’s the deal: Uptycs for all of 2023 for $1

2022 Cloud Data Security Report

Don't miss

3 business application security risks businesses need to prepare for in 2023

Researchers release PoC exploit for critical Windows CryptoAPI bug (CVE-2022-34689)

Attackers use portable executables of remote management software to great effect

How businesses can bolster their cybersecurity defenses with open source

ChatGPT is a bigger threat to cybersecurity than most realize

Cybersecurity news
Help Net Security - Daily information security news with a focus on enterprise security.
© Copyright 1998-2023 by Help Net Security
Read our privacy policy | About us | Advertise
Follow us