Journals / Kamu Ekonomisi ve Kamu Mali Yönetimi Dergisi / 2026 / Cilt: 6 Sayı: 2

THE HUMAN AND INSTITUTIONAL LIMITS OF SECURE COMMUNICATION: A CASE STUDY OF THE 2025 “SIGNALGATE” INCIDENT

ŞİFRELİ AMA HALA GÜVENLİK AÇIKLARI MI VAR? 2025 "SIGNALGATE" OLAYI VE UÇTAN UCA ŞİFRELEMENİN SINIRLARI ÜZERİNE BİR VAKA ÇALIŞMASI

Cihan Ünal(HACETTEPE ÜNİVERSİTESİ, BAŞKENT ORGANİZE SANAYİ BÖLGESİ TEKNİK BİLİMLER MESLEK YÜKSEKOKULU)0000-0002-5255-4078
Pages
544–556
Publication Date
2026-10-28
🏛️Bibliographic metadata and full text access for this article are provided via DergiPark.
DergiPark Record ↗
✨

AI Summary & Key Takeaways

AI Insight
⚡ TL;DR(Too Long; Didn't Read)

The article also offers a comparative evaluation of other messaging applications such as Telegram, Messenger, and FaceTime to illustrate broader patterns of vulnerability and variation in secure communication design

📌 3 Key Takeaways

🎯
Objective & Hypothesis:This study examines the role and limitations of end-to-end encryption (E2EE) technol-ogy in secure digital communication, using the 2025 "Signalgate" scandal as a case study.
📊
Key Findings & Data:This case demonstrates that digital security is determined not only by software encryption but also by user behavior, application design, and institutional policies.
💡
Conclusion & Impact:The article also offers a comparative evaluation of other messaging applications such as Telegram, Messenger, and FaceTime to illustrate broader patterns of vulnerability and variation in secure communication design
🔬Design:Araştırma Makalesi
📍Scope:2025 Verileri
⚙️Variables:Uçtan Uca Şifreleme · Dijital Güvenlik · Signal Uygulaması

Abstract

This study examines the role and limitations of end-to-end encryption (E2EE) technol-ogy in secure digital communication, using the 2025 "Signalgate" scandal as a case study. The incident involved senior U.S. officials sharing sensitive information about a planned military operation in Yemen through the encrypted messaging app Signal. A critical data breach occurred when a journalist was accidentally added to the group chat, highlighting how even platforms deemed secure can suffer serious vulnerabilities due to user error. This case demonstrates that digital security is determined not only by software encryption but also by user behavior, application design, and institutional policies. Within this context, the article discusses what end-to-end encryption protects, what it cannot protect, and the key security lessons to be drawn for both individuals and government institutions. The article also offers a comparative evaluation of other messaging applications such as Telegram, Messenger, and FaceTime to illustrate broader patterns of vulnerability and variation in secure communication design

Özet

Bu çalışma, 2025 "Signalgate" skandalını örnek olay olarak kullanarak, güvenli dijital iletişimde uçtan uca şifreleme (E2EE) teknolojisinin rolünü ve sınırlamalarını inceliyor. Olayda, üst düzey ABD yetkilileri Yemen'de planlanan bir askeri operasyon hakkında hassas bilgileri şifreli mesajlaşma uygulaması Signal aracılığıyla paylaşmıştı. Bir gazetecinin yanlışlıkla grup sohbetine eklenmesiyle kritik bir veri ihlali meydana geldi ve bu durum, güvenli kabul edilen platformların bile kullanıcı hatası nedeniyle ciddi güvenlik açıkları yaşayabileceğini gösterdi. Bu olay, dijital güvenliğin yalnızca yazılım şifrelemesiyle değil, aynı zamanda kullanıcı davranışı, uygulama tasarımı ve kurumsal politikalarla da belirlendiğini göstermektedir. Bu bağlamda, makale uçtan uca şifrelemenin neleri koruduğunu, neleri koruyamadığını ve hem bireyler hem de devlet kurumları için çıkarılacak temel güvenlik derslerini tartışmaktadır. Makale ayrıca, güvenli iletişim tasarımındaki daha geniş güvenlik açığı ve çeşitlilik kalıplarını göstermek için Telegram, Messenger ve FaceTime gibi diğer mesajlaşma uygulamalarının karşılaştırmalı bir değerlendirmesini de sunmaktadır.

🔖

Cite This Article

Ünal, C., Yıldırım, H. (2026). THE HUMAN AND INSTITUTIONAL LIMITS OF SECURE COMMUNICATION: A CASE STUDY OF THE 2025 “SIGNALGATE” INCIDENT. Kamu Ekonomisi ve Kamu Mali Yönetimi Dergisi, Cilt: 6 Sayı: 2, 544–556. https://doi.org/10.71284/jpepfm.20266214

📄 Full Text PDF Viewer

📄

PDF görüntüleyici hazırlanıyor...

References (28)

  1. Abelson, H., Anderson, R., Bellovin, S. M., Benaloh, J., Blaze, M., Diffie, W., Gilmore, J., Green, M., Landau, S., Neumann, P. G., Schneier, B., & Spector, A. (2015). Keys under doormats: Mandating insecurity by requiring government access to all data and communications. Journal of Cybersecurity, 1(1), 69–79.
  2. Al-Hlou, Y. (2025, April 3). Pentagon watchdog opens probe into use of Signal to discuss Yemen attack plans. Reuters. https://www.reuters.com/world/us/pentagon-watchdog-opens-probe-into-use-signal-yemen-attack-plans-2025-04-03/
  3. Apple. (2023). About security in FaceTime. Apple Support. https://support.apple.com/en-us/HT209110
  4. Bradley, T. (2025, March 29). SignalGate and the danger of digital breadcrumbs. Forbes. https://www.forbes.com/sites/tonybradley/2025/03/29/signalgate-and-the-danger-of-digital-breadcrumbs/
  5. ComplexDiscovery. (2025, April 9). SignalGate: When secure technology meets human error. ComplexDiscovery. https://complexdiscovery.com/signalgate-when-secure-technology-meets-human-error/
  6. Cybersecurity and Infrastructure Security Agency. (2024, December). Mobile communications best practice guidance. CISA. https://www.cisa.gov/sites/default/files/2024-12/guidance-mobile-communications-best-practices.pdf
  7. Euronews. (2025, March 25). ABD’nin Yemen’e yönelik savaş planları Signal grup sohbetinde sızdırıldı. Euronews. https://tr.euronews.com/2025/03/25/abdnin-yemene-yonelik-savas-planlari-signal-grup-sohbetinde-sizdirildi
  8. Facebook Messenger. (2023). End-to-end encryption update. Meta. https://messengernews.fb.com
  9. Greenberg, K. J. (2016). Counter-radicalization via the internet. The ANNALS of the American Academy of Political and Social Science, 668(1), 165-179.
  10. Henthorn-Iwane, A. (2025, March 27). Five lessons from SignalGate about secure communications. Wire. https://wire.com/en/blog/lessons-from-the-signalgate-crisis
  11. Lee, N. T., Pell, S., & Anderson, S. (2025, April). SignalGate and the use of commercial apps in government. Brookings Institution. https://www.brookings.edu/articles/signalgate-and-the-use-of-commercial-apps-in-government-the-techtank-podcast/
  12. Marlinspike, M., & Perrin, T. (2016). The X3DH Key Agreement Protocol. Open Whisper Systems; 2016.
  13. ODATV. (2025, March 27). Signalgate derinleşiyor: Mesajların tümü yayınlandı, ipi çekilen kim olacak? ODATV. https://www.odatv.com/ozel/signalgate-derinlesiyor-mesajlarin-tumu-yayinlandi-ipi-cekilen-kim-olacak-120092209
  14. Open Whisper Systems. (2016). The Signal protocol. Open Whisper Systems. https://signal.org/docs/
  15. Portal26. (2025). AI TRiSM platform overview: Visibility, governance, and security for GenAI. Portal26. https://www.portal26.ai/
  16. QuickBlox. (2023). What is secure messaging? Best practices and technologies. QuickBlox. https://quickblox.com/blog/what-is-secure-messaging/
  17. RocketMeUp Cybersecurity. (2024, October 10). End-to-end encryption in messaging apps — How secure is it? Medium. https://medium.com/@RocketMeUpCybersecurity/end-to-end-encryption-in-messaging-apps-how-secure-is-it-de4229e8e1bc
  18. Schneier, B. (2015). Data and Goliath: The hidden battles to collect your data and control your world. WW Norton & Company.
  19. Security Magazine. (2025, April 14). Behind the signal leak: Vulnerabilities in high-security communication. Security Magazine. https://www.securitymagazine.com/articles/101539-behind-the-signal-leak-vulnerabilities-in-high-security-communication
  20. Signal Foundation. (2023). Technology overview. Signal. https://signal.org/docs/
  21. Telegram. (2023). FAQ: What are secret chats? Telegram. https://telegram.org/faq#q-what-are-secret-chats
  22. TigerConnect. (2024, August 10). 8 secure messaging policy best practices. TigerConnect. https://tigerconnect.com/resources/blog-articles/top-8-secure-messaging-policy-best-practices-for-enhanced-security-in-healthcare/
  23. Turak, N. (2025, March 25). US war plans for Yemen leaked in Signal group chat mishap. CNBC. https://www.cnbc.com/2025/03/25/us-war-plans-for-yemen-leaked-in-signal-group-chat-mishap.html
  24. Yin, R. K. (2018). Case study research and applications (Vol. 6). Thousand Oaks, CA: Sage.
  25. WhatsApp. (2023). WhatsApp encryption overview. WhatsApp. https://www.whatsapp.com/security/
  26. Wilson, T. J. (2020). Collaborative justice and harm reduction in cyberspace: Policing indecent child images. The Journal of Criminal Law, 84(5), 474-496.
  27. Wired Staff. (2018, June 14). Encrypted messaging isn't magic. Wired. https://www.wired.com/story/encrypted-messaging-isnt-magic/
  28. Wired Staff. (2025, April 2). Here’s what happened to those Signalgate messages. Wired. https://www.wired.com/story/heres-what-happened-to-those-signalgate-messages/