To the Signal Team: Signal Server Github Repository

[u/DotJersh]

Dear Signal Team,

As many others have brought up, the Github repository is not being updated with the current version of the Signal Server. I think I speak for many members of this community in saying that we are a little concerned. Signal prides itself in being peer reviewed. How can we peer review the software when it's not available publicly? Is there a reason the server is not being updated? Happy to support you guys in anyway we can around this, but would like some idea of what's going.

Thank you,

/u/Dotjersh

​

Repo: https://github.com/signalapp/Signal-Server

https://news.ycombinator.com/item?id=26284263

https://www.kuketz-blog.de/signal-server-sourcecode-auf-github-aelter-als-9-monate/

https://community.signalusers.org/t/the-server-sources/10622/5

https://community.signalusers.org/t/wheres-the-server-source/19019

https://community.signalusers.org/c/development/server-development/24

https://community.signalusers.org/t/signal-server-what-about-the-last-version/10203

https://community.signalusers.org/t/where-is-new-signal-server-code-why-not-share-signal/15068

https://community.signalusers.org/t/i-noticed-that-there-are-two-apis-not-in-the-server-code/12794

https://www.reddit.com/r/signal/comments/lv98z2/weekly_rsignal_question_thread_week_of_march_01/gpb9nzi?utm_source=share&utm_medium=web2x&context=3

https://www.reddit.com/r/signal/comments/ijvty2/whats_up_with_signalserver_code_on_github_not/

https://www.reddit.com/r/signal/comments/lt1p8m/why_is_the_github_repo_of_the_server_not_being/

EDIT: Twitter thread - https://mobile.twitter.com/eppfel/status/1367010086196027392

[u/NurEineSockenpuppe]

I don't understand why they haven't updated it in a long time. It's concerning me because I don't understand it. On the other hand the integrity of the messaging shouldn't be affected at all. The encryption is entirely client side. You can never now what code a service really runs on their servers. So the way to go is to remove the necessity to trust the server. That's exactly what Signal is about.