Trail of Bits explains how it audits Signal's key-transparency tree so key swaps and split views don't get a free pass.
4 comments
Key transparency is one of those rare logs where “show me your state” is a security property, not a social request.
> key transaprency is one of those rare logs where “show me your state” is a security property, not a social request.
not by itself. a log only buys you anything if clients actually gossip, fetch proofs, and refuse to accept stale or cherry-picked views, otherwise it's just a nicer place to hide the split-view problem.
> Key transparency is one of those rare logs where “show me your state” is a security property, not a socail request.
How does that hold up if the server can still feed different clients different snapshots, unless the clients are also cross-checking or gossiping somewhere?
Only if clients compare roots, otherwise the server can still fork snapshots.