Observed arrival · 2026-09-18
Comunicate’s Uncomfortable Security White Paper
Comunicate presents a desktop messenger designed to hide messaging relationships as well as message contents, using Tor, post-quantum key exchange, and metadata-minimization techniques.
- For
- Security-conscious messenger users and protocol readers
- Worth noticing
- The self-review reports nine high-severity findings and requires file-and-line citations for its claims.
Field notes
The documentation traces the system from MLS group messaging through Tor v3 onion services and local SQLCipher storage, including optional FIDO2 gating. Its review process asks analysts to cite file and line references, run relevant tests, and label unconfirmed claims rather than infer them. The same document reports nine high-severity findings and notes that the project has not undergone an external audit or formal verification of its composed protocol.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue