Most people think secure messaging begins and ends with encryption. Signal CTO Ehren Kret says that is only part of the picture.

In this episode of Cyber Focus, host Frank Cilluffo sits down with Kret to discuss what private communication really requires, from protecting message content to limiting what platforms can learn from metadata, identity, group membership and social graphs. Kret explains how Signal's nonprofit model shapes its privacy-first design choices, why endpoint security remains a major challenge, and how AI built into operating systems could create new risks for private communication.

The conversation also explores post-quantum encryption, lawful access debates, phishing threats against messaging accounts, and why the future of secure communication depends not only on better technology, but on helping users understand what is and is not truly private.

Main Topics

• Secure messaging misconceptions
• Metadata and social graphs
• Endpoint security risks
• AI and platform privacy
• Post-quantum encryption
• Signal's nonprofit model

Key Quotes

"Disappearing messages, and that's one piece of the puzzle... But a lot of people think that's sort of the end." — Ehren Kret

"You should also be looking at does your service provider have access to the message content and is it protected from visibility from them?" — Ehren Kret

"Being able to build a social graph can reveal information, even though you don't necessarily have the message content, it is highly leaky. You can infer from a social graph, you can see who is talking to who, and a lot of times that reveals information about the content of those communications ." — Ehren Kret

"Signal...is an anti mass surveillance tool. It's not necessarily an anti targeted surveillance tool because at the end of the day your phone is still an endpoint that can be targeted." — Ehren Kret

"Since it's a nonprofit, the primary goal for Signal is to spread the use of end-to-end encrypted for messaging and for communications in general." — Ehren Kret

Relevant Links and Resources

Signal Foundation

Signal: Sealed Sender

Signal: Quantum Resistance and the Signal Protocol

Cloudflare Post-Quantum Roadmap

Google Research on Quantum Vulnerabilities

About Ehren Kret

Ehren Kret is the Chief Technology Officer at Signal, where he helps lead the development of privacy-preserving communication technology. He previously served as an engineering director at WhatsApp, where he helped scale end-to-end encryption for more than a billion users.