searchtwitterarrow rightmail strokearrow leftmail solidfacebooklinkedinplusangle upmagazine plus
Help Net Security - Daily information security news with a focus on enterprise security.
Help Net Security - Daily information security news with a focus on enterprise security.
  • News
  • Features
  • Expert analysis
  • Videos
  • Reviews
  • Events
  • Whitepapers
  • Industry news
  • Product showcase
  • Newsletters
Zeljka Zorz
Zeljka Zorz, Editor-in-Chief, Help Net Security
February 15, 2017
Share

Secure comms app Signal now offers encrypted video calls

Users of secure chat and voice call app Signal will soon be able to enjoy the option of encrypted video calls.

Signal encrypted video calls

For the moment, only calls between Signal users who have both enabled the option (Signal Settings -> Advanced -> Video calling beta) will use this new calling system, and the feature – as noted in the settings – is still in beta.

iOS users who want to test the option out but have their iPhone linked to their iCloud accounts are instructed to disable the feature’s use of Apple’s CallKit framework for VoIP calls – if they don’t want some of their call metadata getting stored on Apple’s servers.

How come?

“CallKit offers a native calling experience to VoIP apps like Signal,” Open Whisper Systems developer and Signal creator Moxie Marlinspike explained.

“As well as being able to answer calls directly from your lock screen, you’ll also see Signal calls in the system’s ‘Recent Calls’ list. This is because iOS treats CallKit calls like any other call, however that also means some information will be synced to iCloud if enabled. This information includes who you called and how long you talked.”

CallKit use can be disabled in Signal Settings -> Advanced -> Use CallKit. Disabling it on your phone means that your Signal-using contacts’ phones will also be prevented from leaking you call metadata to Apple.

Marlinspike told Wired that they have still not decided whether the next version of Signal will integrate CallKit by default or as an opt-in feature, and how they will put the option to users if the opt for the latter.

He has also shared more technical details about how they are handling the security of VoIP calls.

More about
  • data leak
  • encryption
  • metadata
  • privacy
  • secure communications
  • Signal
Share this

Featured news

  • Leveraging large language models (LLMs) for corporate security and privacy
  • Generative AI’s influence on data governance and compliance
  • Google extends passkeys to Google Workspace accounts
Spin Up A CIS Hardened Image

Sponsored

The best defense against cyber threats for lean security teams

Webinar: Tips from MSSPs to MSSPs – starting a vCISO practice

Security in the cloud with more automation

CISOs struggle with stress and limited resources

Don't miss

Leveraging large language models (LLMs) for corporate security and privacy

Generative AI’s influence on data governance and compliance

Google extends passkeys to Google Workspace accounts

MOVEit Transfer zero-day was exploited by Cl0p gang (CVE-2023-34362)

Surveilling your employees? You could be putting your company at risk of attack

Cybersecurity news
Help Net Security - Daily information security news with a focus on enterprise security.
© Copyright 1998-2023 by Help Net Security
Read our privacy policy | About us | Advertise
Follow us