German members of parliament (MPs) advised to drop Signal in favor of Wire over security concerns

Deep@mander.xyz · 5 days ago

RecursiveParadox@piefed.social · 2 days ago

But I hate how much metadata that Wire leaks.

This is the first I have heard of this - can you point me to any sites?

nymnympseudonym@piefed.social · 2 days ago

Wire API calls use WebRTC, DTLS, SRTP, and TURN relays, which all encrypt data but leak metadata
Creator, timestamp, participants, devices, and group name are stored server-side https://github.com/wireapp/wire/issues/103
Server therefore can infer who is connected to whom and which devices belong to each account https://github.com/wireapp/wire/issues/214
No mitigation from timing attacks https://www.research-collection.ethz.ch/bitstreams/669f99ed-bbdc-4818-b0b9-0519e0427d42/download

RecursiveParadox@piefed.social · 1 day ago

Thanks for the very detailed reply! I’ll check into it.