4 ms·

There are federated options for messengers, the fact that the current darlings aren't is not a mark against the option itself. Riot exists. Can you find a secu

by m3rc 10y ago

There are federated options for messengers, the fact that the current darlings aren't is not a mark against the option itself. Riot exists. Can you find a security expert RECOMMENDING email? That would be a better example of how it's not a consensus, like you claim.

darfs 10y ago
For those(like me) who are looking for the famous reference Implementation Vector, it got a rename[0] to Riot[1] lately. [0]Rename: https://medium.com/@RiotChat/lets-riot-f5b0aa99dc8e#.3toozs7r6 https://medium.com/@RiotChat/lets-riot-f5b0aa99dc8e#.3toozs7... Homepage: https://matrix.org/docs/projects/client/riot.html https://matrix.org/docs/projects/client/riot.html
anigbrowl 10y ago
Riot might be a great platform for doing business, but it's pretty useless for any other kind of activity. If you're a political activist having an app called 'Riot' on your phone or computer is not going to look good to anyone in law enforcement.
- Arathorn 10y ago
  well, it's FOSS; someone could maintain a fork with a less controversial name (I hear 'vector' is up for grabs O:-)
- dtornabene 10y ago
  "having an app called riot" is the absolute least of an actual activists concern when selecting something to help them communicate. One of the most well known leftist platforms for email is riseup.
  - anigbrowl 10y ago
    I'm aware of that, and I think flagging yourself by choosing such a branded platform is the height of stupidity. Maybe my social circles are just more privacy-oriented.
e12e 10y ago
As far as I can tell, encrypted email is still how you reach out to CERT, security teams at distros such as Ree Hat, Debian and so on? These people might not be crypto experts, but hopefully many of them are security experts. Gpg is also how most mailing list communication is (clear-)signed - and that coupled with public archives does give a way to verify that the person that controls the key that signed release notes for this package these last five years, is the person that will be able to read this zero-rated report that is critical. (It says very little about said owners real identity, or his or her legal name) What does FreeBSD, OpenBSD or Oracle recommend for sending sensitive information to security@<company|project>? That said, modern email suck. Mutt (possibly with "not much") might "suck less" - but we need many more, better (graphical) email clients. I think Fastmail's work on a json-based client protocol is interesting (not because it's json, but because every blank staring IMAP-client writing developer keep saying that there are terrible horrors laying in ambush for the unwary). Opera had a nice, new-ish, fast mail client. Other than that I'm unaware of any serious effort to make a new, modern, easy to use IMAP client. Let alone an open source one. Or one that doesn't beg to expose library bugs by rendering html, images etc in-line - or ignore user privacy by loading external resources that enable user tracking. I've been contemplating writing one for quite some time.
- throwanem 10y ago
  > every blank staring IMAP-client writing developer keep saying that there are terrible horrors laying in ambush for the unwary Oh, my, yes. Lasciate ogni speranza...

by m3rc 10y ago

darfs 10y ago

For those(like me) who are looking for the famous reference Implementation Vector, it got a rename[0] to Riot[1] lately. [0]Rename: https://medium.com/@RiotChat/lets-riot-f5b0aa99dc8e#.3toozs7r6 https://medium.com/@RiotChat/lets-riot-f5b0aa99dc8e#.3toozs7... Homepage: https://matrix.org/docs/projects/client/riot.html https://matrix.org/docs/projects/client/riot.html

anigbrowl 10y ago

Riot might be a great platform for doing business, but it's pretty useless for any other kind of activity. If you're a political activist having an app called 'Riot' on your phone or computer is not going to look good to anyone in law enforcement.

Arathorn 10y ago
well, it's FOSS; someone could maintain a fork with a less controversial name (I hear 'vector' is up for grabs O:-)
dtornabene 10y ago
"having an app called riot" is the absolute least of an actual activists concern when selecting something to help them communicate. One of the most well known leftist platforms for email is riseup.
- anigbrowl 10y ago
  I'm aware of that, and I think flagging yourself by choosing such a branded platform is the height of stupidity. Maybe my social circles are just more privacy-oriented.

e12e 10y ago

As far as I can tell, encrypted email is still how you reach out to CERT, security teams at distros such as Ree Hat, Debian and so on? These people might not be crypto experts, but hopefully many of them are security experts. Gpg is also how most mailing list communication is (clear-)signed - and that coupled with public archives does give a way to verify that the person that controls the key that signed release notes for this package these last five years, is the person that will be able to read this zero-rated report that is critical. (It says very little about said owners real identity, or his or her legal name) What does FreeBSD, OpenBSD or Oracle recommend for sending sensitive information to security@<company|project>? That said, modern email suck. Mutt (possibly with "not much") might "suck less" - but we need many more, better (graphical) email clients. I think Fastmail's work on a json-based client protocol is interesting (not because it's json, but because every blank staring IMAP-client writing developer keep saying that there are terrible horrors laying in ambush for the unwary). Opera had a nice, new-ish, fast mail client. Other than that I'm unaware of any serious effort to make a new, modern, easy to use IMAP client. Let alone an open source one. Or one that doesn't beg to expose library bugs by rendering html, images etc in-line - or ignore user privacy by loading external resources that enable user tracking. I've been contemplating writing one for quite some time.

throwanem 10y ago
> every blank staring IMAP-client writing developer keep saying that there are terrible horrors laying in ambush for the unwary Oh, my, yes. Lasciate ogni speranza...