SRC - Digital Sovereignty
Folder: 06 - SOURCE MATERIAL Supporting: Digital Sovereignty
Signal
Signal Foundation — Official https://signal.org/ End-to-end encryption confirmed. Signal cannot read messages or listen to calls confirmed. Nonprofit structure confirmed. Open source confirmed. Username feature (no phone number sharing) added 2024 confirmed.
Signal Blog — Privacy is Expensive https://signal.org/blog/signal-is-expensive/ Nonprofit structure as structural safeguard against profit-motivated privacy sacrifice confirmed. Open source and open to scrutiny confirmed. Metadata protection technologies confirmed. Quantum resistance work confirmed.
Wikipedia — Signal Protocol https://en.wikipedia.org/wiki/Signal_(software) EFF perfect score — 7 of 7 criteria confirmed. Criteria: encrypted in transit, E2E with user-held keys, identity verification, forward secrecy, open source, documented design, independent security audit confirmed. WhatsApp adoption of Signal Protocol confirmed. George Floyd protest adoption confirmed. January 2021 surge following WhatsApp policy change confirmed.
Wikipedia — Signal Protocol https://en.wikipedia.org/wiki/Signal_Protocol Protocol adopted by WhatsApp, Google Messages, Facebook Messenger confirmed. Double Ratchet Algorithm confirmed. Open source development confirmed. WhatsApp encrypts over 1 billion people’s conversations using Signal Protocol confirmed.
Browsing
Factually — Privacy Browser Comparison 2026 https://factually.co/product-reviews/electronics-tech/best-privacy-first-browsers-2026-tor-brave-firefox-mullvad-which-to-use-when-116f10 Brave as strongest everyday privacy browser confirmed. Firefox + LibreWolf as open source non-Chromium option confirmed. Tor for high-assurance anonymity confirmed. Mullvad Browser as Tor Project
- Mullvad VPN joint project confirmed.
Privacy Guides — Tor Browser https://www.privacyguides.org/en/tor/ Tor anonymity model documented. Do not install additional extensions on Tor — breaks fingerprinting resistance confirmed. Tails OS joining Tor Project September 2024 confirmed. Orbot for iOS/Android confirmed.
Wikipedia — Tor Network https://en.wikipedia.org/wiki/Tor_(network) Over 6,000 volunteer-run servers confirmed. Used by journalists, activists, whistleblowers confirmed. Russia banned Tor December 2021 confirmed. DHS pressure on libraries to remove Tor relay documented. Edward Snowden Tor endorsement confirmed.
Surfshark — Privacy Browser Guide https://surfshark.com/blog/what-is-the-best-browser-for-privacy No browser offers complete privacy confirmed. Incognito mode does not prevent ISP, employer, or network tracking confirmed. Firefox blocks known trackers by default confirmed. Brave blocks ads and trackers aggressively by default confirmed.
LetsDefend — Privacy Browsers https://letsdefend.io/blog/top-5-privacy-focused-web-browsers LibreWolf as hardened Firefox fork with telemetry removed confirmed. DuckDuckGo blocks third-party trackers and enforces HTTPS confirmed. DuckDuckGo does not store personal data confirmed.
ProtonMail https://proton.me End-to-end encrypted email confirmed. Swiss jurisdiction confirmed. Cannot be compelled by US authorities without Swiss court order confirmed. Open source confirmed. Free tier available confirmed.
Tutanota https://tuta.com German provider confirmed. End-to-end encrypted by default confirmed. Open source confirmed. EU jurisdiction confirmed. Free tier available confirmed.
Metadata and Limitations
Kahana — VPN Tor Privacy Analysis 2026 https://kahana.co/blog/vpn-tor-privacy-browsers-layered-security-overlapping-myths-2026 VPNs hide IP from sites but VPN provider can see traffic confirmed. Tor deanonymization through traffic analysis at both ends confirmed. Firefox blocks trackers but does not hide network metadata confirmed. Europol deanonymizes through metadata and operational mistakes rather than breaking encryption confirmed. Endpoint artifacts recoverable regardless of VPN or Tor confirmed. Layered anonymity reduces — not eliminates — exposure confirmed.
GrapheneOS
GrapheneOS https://grapheneos.org Open source privacy-focused Android operating system confirmed. Removes Google services confirmed. Hardened security model confirmed. Free to use confirmed.
Still To Source
- Gmail reads email for advertising — primary source confirmation (Google policy) investigate
- App permissions data collection — specific studies on apps requesting unnecessary permissions investigate
- DuckDuckGo vs Google — specific data on what Google collects from search queries investigate
- Signal court cases — documented cases where Signal could not provide message content to law enforcement investigate
- ProtonMail Swiss court order history — cases where Swiss courts did/did not compel data handover investigate