I’m not a programmer, but this doesn’t seem hard. The API could specify a cryptographic standard. Third party clients don’t need access to iCloud data, just the API to pass message and attachment content in encrypted form with a standardized handshake.
The signal code is there for transparency and individual use, not for redistribution. Again, this is signal themselves discouraging users from third party apps for things that have and will happen.
I’m not a programmer, but this doesn’t seem hard. The API could specify a cryptographic standard. Third party clients don’t need access to iCloud data, just the API to pass message and attachment content in encrypted form with a standardized handshake.
What am I missing?
And what data would this client be handling via the API?
Even Signal discourages third party apps for this reason you are indeed missing.
Signal is open source. That’s why they warn against using third party closed source apps which cannot be security audited.
iMessage is a proprietary app that cannot be security audited. An open source alternative would be more secure, not less.
https://www.tomsguide.com/news/fake-signal-and-telegram-apps-sneak-malware-into-thousands-of-android-phones-delete-these-right-now
The signal code is there for transparency and individual use, not for redistribution. Again, this is signal themselves discouraging users from third party apps for things that have and will happen.