It would be nice if Signal let you do this per conversation.

It's sort of a victim of its own success, I use it for both things that do and don't require opsec

You also don't need to do this on Android unless you are concerned about random people seeing the messages on your screen. Signal on Android does not use Google's push notification service

They are similar

They shouldn't have had to do this though.

Thank you internet stranger. I'm going to do this but fuck me if I can get my family to change their settings. They don't even know they can create a poll.

Don't ask me. I made all of you admins do I don't have to answer questions like how do I make a poll. Click the + button. Yeah. The one on your fucking screen right now.

No grandpa. We are not trying to figure out who is trans. No popop none of are naxies (I hope)

Anyway, click the +. Right there. That is how you create a poll.

This is the problem, not what is shown in the per-app notifications. Don't turn on notification history.

Yup,

https://www.privacyguides.org/articles/2022/07/07/signal-configuration-and-hardening/

Among other things

Does that actually prevent the app from sending the content through Apple’s servers or does it just prevent iOS from showing it in the notification area?

It's worth noting apps can avoid this on Android: https://tuta.com/blog/google-push-alternative#alternatives-to-google-push

Any FDroid app cannot use Firebase for push notifications since it's proprietary: https://forum.f-droid.org/t/firebase-allowed-in-fdroid-apps/7540

Signal already has that setting. It’s up to the user to decide their level of convenience vs security.

A notification doesn’t have to carry any data in its payload; Signal devs could take care of that.

Yeah. It's not just signal either that could be an issue. Sure, I want my private messages to be private, but there are financial apps, business email, and many other bits of very sensitive information that could be captured in those messages

The actual notification telling you there is a message shouldn't contain the content if its sensitive, it should only carry an ID to said message, and im certain this is what signal does. Thats like the most utter basic thing about notifications.

Once that notification arrives, the system decides what to show you after fetching the message from the ID in the background. You can opt to keep that private or show it.

In this case if you opt to show it, it leaks.

The Signal server would send a backend notification to the client app via the Apple Push Notification Service. The app is then able to wake up, at which point it fetches new messages (securely) from the Signal servers. The app then generates a local notification with a preview of the received message. iOS is then logging those messages.

It's not because of push notifications. the message is not sent to firebase, just a signal that the app should do a refresh.

It's because the system saves the notifications apps posted to the notification menu.

I'm pretty sure Signal has two builds: one with Google service and one without.

When I saw it hit the news before, it was because they were reading notifications off Google servers, which contained at least part of the message. Not because they were reading the device's notification history.

Not all, no. There are alternatives on Android:

The good news is that alternative methods for push notifications are available, namely SSE (Server Sent Events) and WebSockets.

Additionally, a new open source project, UnifiedPush is becoming increasingly popular. UnifiedPush is an open source, private alternative to Google for notifications.

https://tuta.com/blog/google-push-alternative#alternatives-to-google-push

Signal for android uses web sockets for notifications

Why would a notification need to leave my device at all?

Is there a good decent e2e messenger not in the US? Would love an alternative.