Security Affairs reports that Signal's desktop application puts the message decryption key on your computer's disk in plain text. This is a strangely negligent practice for an organization which is so widely praised for its security practices.