Why do Signal releases contain an expiration time bomb?
That is, why is the user forced to update in order to use the application, even if no critical security issues arose?
The passage of time is not a good excuse for a mandatory update.
That is, why is the user forced to update in order to use the application, even if no critical security issues arose?
The passage of time is not a good excuse for a mandatory update.
Because they’re adding new features, both security improvements and user‐facing sugar.
Moxie’s thoughts on this are well‐known: he believes he can build a better and more secure messenger by keeping deployed clients as closely aligned as possible. Even if you disagree (and plenty of people disagree, as we see in almost every Signal comment thread), it’s at least a valid opinion to hold. https://signal.org/blog/the-ecosystem-is-moving/
So there's no point in auditing a Signal release.
So as Signal becomes more and more disagreeable (something that's bound to happen with any actively changing software), you're forced to take it or leave it.
It's a trap.
I am a user of Signal, and have been using it for a number of years now, but this concern remains.