diff --git a/FAQ.md b/FAQ.md index 1efcc0d..57a8744 100644 --- a/FAQ.md +++ b/FAQ.md @@ -90,6 +90,12 @@ No, your online status isn't exposed by publishing your `briar://` link. For str For a more technical explanation, for adding each new contact a separate Tor hidden service gets created whose address depends on both your own and your contact's public key. See the [Bramble Rendezvous Protocol](https://code.briarproject.org/briar/briar-spec/-/blob/master/protocols/BRP.md#2-the-rendezvous-protocol) for more information. +# Does Briar provide anonymity? + +No. Briar does not conceal your identity from your contacts. It provides *unlinkability* but not *anonymity*. This means nobody else can discover who your contacts are, but your contacts **may** be able to discover who you are. + +For example, Briar shares your Bluetooth address with your contacts so they can connect to you via Bluetooth when they're nearby. Your contacts could use this information to confirm a guess about your identity. Your Bluetooth address is shared even if you add a contact remotely by exchanging `briar://` links. + # Has Briar been independently audited? Yes, Briar was audited by Cure53 in 2017. You can read the audit report here: @@ -102,7 +108,7 @@ Security audits are expensive so we can't commission an audit for every release, # Does Briar include malware, spyware, trackers or backdoors? -No, Briar doesn't include malware, spyware, trackers or backdoors - and we can prove it! +No. Briar doesn't include malware, spyware, trackers or backdoors - and we can prove it! We have a reproducible build process that can prove that the application published on our website (and in Google Play and F-Droid) corresponds exactly to the published source code. You can read more about reproducible builds here: