Top officials from the Trump administration inadvertently included journalist Jeffrey Goldberg in an encrypted chat on the Signal messaging app, where they discussed military strategies against Yemen’s Houthi rebel group. This incident has prompted Democratic lawmakers, along with some Republican colleagues, to call for a congressional investigation into what they perceive as a significant security breach. Under U.S. law, mishandling classified information can lead to criminal charges, although it remains uncertain if any laws were violated in this instance.
Goldberg, editor-in-chief of The Atlantic, reported that he was mistakenly added to the chat group on March 13, which was intended to coordinate U.S. military actions in response to Houthi attacks on shipping in the Red Sea. The inclusion of an unknown number, such as Goldberg’s, raises concerns about the protocols surrounding the sharing of classified information on commercial messaging platforms.
How does Signal work?
Signal is renowned for its secure messaging capabilities, utilizing end-to-end encryption to ensure that even the service provider cannot access users’ private conversations. This encryption guarantees a high level of privacy for its users. The platform is accessible on both smartphones and computers, allowing for messaging, voice, and video calls. A telephone number is required to create an account.
Unlike many other messaging applications, Signal does not track or store user data. Its open-source code allows security experts to verify its integrity and safety. Meredith Whittaker, president of Signal, defended the app’s security, stating, “Signal is the gold standard in private comms,” and noted that WhatsApp licenses Signal’s cryptography to secure its message contents.
How safe is it?
Signal operates as an open-source, fully encrypted messaging service hosted on centralized servers managed by Signal Messenger. The only data retained on its servers includes phone numbers, the date of account creation, and the last login information. Users’ contacts and conversations are stored locally on their devices, with options available for automatic deletion of messages after a specified duration.
Signal’s business model is devoid of advertisements or affiliate marketing, emphasizing user privacy. The app also offers features that allow users to conceal their phone numbers and verify message safety through additional safety numbers. Notably, Signal does not utilize encryption from the U.S. government or any other government entities, nor is it hosted on government servers.
Rocky Cole, a cybersecurity expert, remarked on Signal’s reputation within the security community, stating, “The risk of discussing highly sensitive national security information on Signal isn’t so much that Signal itself is insecure.” He cautioned that threats to national security often stem from vulnerabilities in the mobile devices themselves, which could compromise the security of all messages, including those sent via Signal.
Who founded Signal?
Founded in 2012 by entrepreneur Moxie Marlinspike, Signal has evolved under the leadership of Whittaker, its current president. In 2018, Marlinspike and WhatsApp co-founder Brian Acton established the non-profit Signal Foundation, which now oversees the app’s operations, with Acton providing initial funding of million.
Acton departed from WhatsApp in 2017 due to disagreements over customer data usage and targeted advertising. Signal asserts that it is not affiliated with any major tech companies and will remain independent.
Who uses Signal?
Signal has gained traction among privacy advocates and political activists, transitioning from a niche messaging app for dissidents to a trusted communication tool for journalists and government organizations. The app experienced significant growth in 2021 following controversial changes to WhatsApp’s privacy policies, prompting many privacy-conscious users to seek alternatives.
Signal’s community forum, which includes Signal employees, highlights the European Commission as a user of the platform. In 2017, the U.S. Senate sergeant at arms approved Signal for use by Senate staff. Despite its strong reputation for secure communications, experts like Ben Wood, chief analyst at CCS Insight, express skepticism about its suitability for discussing national security matters, especially in light of the recent breach involving high-level discussions among Trump aides regarding military actions against Yemeni Houthi militants. Notably, Google’s messaging services and Meta’s platforms like WhatsApp also utilize the Signal Protocol for their encryption needs.
