Signal 2.8.3 adds video calls and can of worms
By Russ Imrie March 25, 2017
Popular iOS 10+ encrypted messaging app Signal has added Video Calling to its toolkit–and no it’s not THAT bad. The first surprise you’ll see in your contacts (iOS contacts, not those in your signal app) when phone integration is activated is that a “signal” option is listed for contacts with an iPhone number. #1 below. Not to worry too much. Click on one and it doesn’t work unless they are one of your verified real Signal contacts and/or have Signal installed.

#1 Surprise in your normal iOS contacts
To quote Signal’s blog info on what this all means…
CallKit is an iOS 10 feature that brings apps like Signal to the same level as the native iOS calling experience. It makes Signal calls answerable with one touch directly from the lock screen, allows initiating Signal calls through the native contacts app, and displays Signal calls in the system’s “recent calls” list.
That “recent calls list” they mention above is the thing. So for the truly paranoid, what that COULD mean is that anyone digging through your unlocked phone can see you made some Signal Calls. There are options that can minimize information revealed then and that comes later. Also what a notification in your lock screen [about an incoming call or message] can reveal also has control options, that is if you have general preferences in iOS set to show notifications or not.
Another phone integration issue is that everything in your phone app is routinely backed up to iCloud. Apple COULD be compelled (or hacked) to reveal your call history, now including Signal’s. You might be ok with that, or not.
The Signal app’s setting panel is accessed by tapping the gear icon which opens the preferences pane, where you can control the new Signal. Privacy, Notifications, and Advanced are what you use.

#2 Preferences Panel
2. Now, the Biggie: Activate Phone Integration in Privacy settings. Or not. You should turn this off immediately until the following settings are done right. You can turn it on later if you want. Here’s what that option looks like. “Off” pictured.

CallKit on/off phone integration

#3. Pick No Name or Content in Notifications

#4. Suggest Secure
Require Approval is good – if for some reason one of your contacts deletes and re-installs the app. This makes absolutely sure you are not being pranked and the contact is genuine.

#5. Dreaded Clear Logs
Now, if you want, go back and activate phone integration

U.S. Capitol SOTU eve, 2011 – photo Russ Imrie
Russell Imrie is a Networking and Content Specialist, craft beer enthusiast, webmaster and an American Indian blogger living in the Washington DC area. For a decade Imrie built systems and lived totally off the grid in the Santa Cruz Mountains of California near Silicon Valley. More opinion pieces are at China Daily Mail (under nom de blog supTweet)
Copyright Russell Imrie 2017