Comment by godelski

  > but that's poor UX, has many failure scenarios and takes a long time.

And requires you to build your social graph from scratch. That alone is killer to the average person.

Is signal the right tool for those hyper concerned with both security and privacy? No. But is it the right tool for the average person to securely communicate and get some good privacy? Absolutely.

People forget the GPG days. GPG had a huge flaw back then: you can't send GPG encrypted emails if no one was going to read them. It didn't become viable until that part was hidden in the background.