Telegram famously lacks end-to-end encryption (unless you intentionally use its private-chat feature, which few people do) and shouldn’t be mentioned in the same context as Signal.
The secret chats were the biggest feature when it started, but now it's an after-thought.
And Signal avoids FDroid because they don't want someone else signing packages but they can always provide an FDroid repository like many others do and sign everything themselves.
If push comes to shove they'll be fine and pressure to black box signal in the EU is unlikely to hold up if they can just move users to another app store.
Signal’s developers have spoken on a number of occasions about how their aim is to ensure encryption for the masses, not a techie elite.
Mass adoption can continue elsewhere if the EU chooses to go down a route that would make play store support in the EU non-viable.
NOTE: F-Droid does not require app developers to share their keys, instead they build the application themselves and sign it with their keys -- something Signal is not a fan of.
tl;dr their rationale no longer applies.
Either way, this isn't about only offering the application on Google Play or only on F-Droid; but providing the option for both. Non-tech savvy users will always pick the more familiar and easy option on average, Google Play.
> If push comes to shove they'll be fine and pressure to black box signal in the EU is unlikely to hold up if they can just move users to another app store.
Having relatively easy alternatives in place would reduce the leverage the EU has to actually practically enforce this and hopefully pressure them into at minimum non-enforcement and preferably walking back the obviously unenforceable legislation.
But if it looks like they could practically force out Signal and co or force them to adopt this MITM if they want to continue existing, then they might be more likely to pursue it.
The app can then retrieve the message and decrypt it. Most of them will then update the notification shown to the user with the full message content.
If A and B talk regularly, there might not be many other C who by coincidence exchange notifications at the same time
So you might be vulnerable to a sort of traffic analysis
Some applications choose to make these notifications more 'secure' by not sending any content through them, just the fact that you have a new notification, but that makes the UX a little less friendly.
https://en.wikipedia.org/wiki/Apple_Push_Notification_servic...
Nothing gets taken down from telegram and they ignore court orders they just go to null