Signal has no security audit reports published

[link2xt]

No description provided.

[chadsec1]

Signal protocol(s) has many audits, but I agree that the implementations appear to have no audits (at least none I could personally find through googling)

[bkil]

So, the main issue with this change is that each property in the chart needs to be terse and well referenced. Prose, and especially speculation does not belong here. You may find a place to elaborate in data/_doc/signal_review.md, though.

You can separately note audits about the app and its protocol as well. As so few apps have such, we had historically considered it a yes if either one had an audit, but as more messengers receive audits, we may reconsider this. Hence why a note should be carried in the description about which part was audited, but not much more elaboration is needed there.

And then you only want to link one or two sources here that carry substantial and reputable claims. I.e., about the page where the vendor claims the audits and lists the organizations who have done it (even if the pdf is not available to you).