Approved for government use: https://www.cisa.gov/sites/default/files/2024-12/guidance-mo...

Not approved for non-public DOD information: https://dodcio.defense.gov/Portals/0/Documents/Library/Memo-...

Guidance from CISA (an agency within the Department of Homeland Security) does not translate to an Approval for DOD.

The DOD memo does not supersede other DOD instructions referenced by the memo requiring RMF and NIAP things.

We're saying the same thing, It's "use Signal for everything you'd use Whatsapp or SMS for, and use the standard secure channels for anything you'd typically need a secure channel for."

From last year after Salt Typhoon became public:

> Adopt a free messaging application for secure communications that guarantees end-to-end encryption, such as Signal or similar apps. CISA recommends an end-to-end encrypted messaging app that is compatible with both iPhone and Android operating systems, allowing for text message interoperability across platforms.

https://www.cisa.gov/sites/default/files/2024-12/guidance-mo...

As Dev_VR said, that is a recommendation from CISA to private sector users, not an approval for DOD users.

That’s only partially true: I know for a fact that people in government agencies were given permission to use Signal during the Salt Typhoon attacks. You might not be able to use Signal for certain DOD purposes, but non-DOD agencies do permit Signal.