“The server has access to minimal metadata, theoretically opening the door to deployment in adversarial environments.”
The new SecureDrop design has no accounts, no message flow metadata and no server state changes an outsider can watch. The server learns almost nothing about who talks to whom, even if it gets seized. The first commit landed in October 2020, and the code is still marked “not intended for production use.” It also runs on elliptic-curve Diffie-Hellman, which they admit is not quantum-safe. Whistleblowers wait years for crypto that is already behind.