Hacker News Reader

The EFF score card is an embarrassment which is essentially equivalent to one of those "comparison table of our competitors" on a SaaS website. That's a good analogy for it, because it uses the same questionable metrics and even more questionable ranking system that one of those tables would use. The score card gives Signal the same ranking as Cryptocat - that's an instant negative result for its usefulness.

View on HN

> Signal the same ranking as Cryptocat

You are probably right that getting a high score on the scorecard doesn't guarantee a secure program. (The standard of the socrecard is not high.)

But can't you still argue that getting a low score on the scorecard would probably mean it's not a secure app?

EFF scorecard isn't meant to measure "how secure" an app is, it's supposed to measure how secure and free the application could potentially be.

Having key's held by the creator is a sure way to undermine any security model, having externally auditable code is a measure to ensure people can independently verify if code is secure or not (or if it's taking a carbon copy for it's creators) etc;

Reply on news.ycombinator.com