Originally, I didn't install signal because i have a google-free android smartphone, and signal depends/depended HARD on the play framework, even though that's not necessary. [1]

> Marlinspike reiterated that the whole point of end-to-end encryption is that users no longer need to trust anyone if the protocol works — and Signal does.

But it depended on the google play framework - and I don't trust google. So where does that leave me?

EDIT:

To reiterate: As far as I can tell Signal itself is secure enough. However, the most secure chat app is insecure if it is run on an insecure operating system.

Now, I don't want to start a discussion about android security. But:

- The update situation is quite bad, leaving (for example) my phone with exploitable bluetooth

- Google itself ... could at least be coerced by a state actor into compromising anyone's privacy

With those two facts given, the practical difference between signal and telegram seems... less relevant.

[1]: Look at the "conversations" app. Yes, it is for XMPP, which is old and uncool - but it (a) doesn't use the play framework either and (b) uses very little battery on my phone, despite holding an open connection most of the time. That IMO proves that depending on the play framework is unnecessary in this case.