Marshmallow is coming "this fall," so ideally we probably only have a month or two before this should be in master.
https://developer.android.com/preview/features/runtime-permissions.html
Since privacy is important for Signal users, I think it would be good to support runtime permissions to run with as little privilege as possible.
With a permission revamp, setting in the manifest the max api level that requires them (via android:maxSdkVersion) for permissions only needed in old versions (e.g. some identity stuff) would be nice. That way less permissions would be required on newer versions and that would make the app more transparent about how they are used
Android 6 is out for some time now and I'd like to limit Signal's permissions. I'm getting the error message "This app is was designed for an older version of Android. Denying permission may cause it to no longer function as intended." and I'm in no mood to mess around.
Has there been any progress made on this? I don't think it makes any sense for a privacy-focused app to be asking for so many permissions on install, especially when this page admits it doesn't even use some of them. What about the principle of least privilege?
I agree. It makes no sense that an app with a focus on security and privacy asks for so many permissions. If there's ever an exploit for the Signal app, the bad guys will have access to almost anything...
in 4.14.0
Most helpful comment
Has there been any progress made on this? I don't think it makes any sense for a privacy-focused app to be asking for so many permissions on install, especially when this page admits it doesn't even use some of them. What about the principle of least privilege?