I use, and recommend to clients, the secure messaging app Signal, for those communications that do not require accountability but do require good cyber security. However, it is not an app suitable for government communications that usually require a higher level of security and should always include accountability to the people who elected the government. Accountability means that when asked by a select committee a government minister cannot say such things as, “I changed my phone”, or “I did not delete the messages, WhatsApp must have gone wrong…”, or any other lame excuse they want to roll out to cover up the truth.
Signal has been in the headlines recently as the US Defence Secretary seems to use it a lot for sharing secrets:
Signal war plans chat: Five takeaways from leaked US top military meeting – BBC News
The BBC has produced a good article looking at the security of the Signal app and why it is a good tool for journalist and cyber security professionals – and possibly your organisation – but no so good for government business.
What is messaging app Signal and how secure is it? – BBC News
Your Takeaway
If there is a business need for a secure message app in your organisation, Signal might be the one for you. However remember by its nature messages exchanged via the app will lack the accountability you might require for any subsequent cyber security investigations.
Clive Catton MSc (Cyber Security) – by-line and other articles
Further Reading
What is wrong with WhatsApp?
WhatsApp defends ‘optional’ AI tool that cannot be turned off – BBC News
