3 ms·

I've been looking for a secure alternative to IRC. Looking through this: Is there a way to turn off forward secrecy? For many uses cases you don't want it. I

I've been looking for a secure alternative to IRC. Looking through this: Is there a way to turn off forward secrecy? For many uses cases you don't want it. I guess you can always add a way after the fact (e.g. by including previous key in each new message) > New participants cannot join a channel without approval of all existing participants. Participants know the exact set of participants in the channel at all times. This seems problematic for anything more than a trivial number of participants.

cyphar 9y ago
> I've been looking for a secure alternative to IRC. Looking through this: Have you looked at Matrix[1]? It's federated, also has multiparty OTR-like encryption, supports multiple devices for each user (with granular trust). And they have many different clients. It also synchronises your chat history. > Is there a way to turn off forward secrecy? For many uses cases you don't want it. I guess you can always add a way after the fact (e.g. by including previous key in each new message) I believe that you'd always want forward secrecy for any transmitted information. However, you could do what Signal does by storing all of your messages with a single encryption key (so you don't store all of the historic keys, which would be bad). [1]: https://matrix.org/ https://matrix.org/
- daurnimator 9y ago
  > Have you looked at Matrix Yes I have. Have been working on a kubernetes setup for it last week infact: http://github.com/hashbang/kubernetes-matrix http://github.com/hashbang/kubernetes-matrix
  - cyphar 9y ago
    Cool, I might spin that up on my local Kubernetes cluster. I was thinking about how hard it would be to self-host a Matrix server (I didn't see any k8s configurations published, and their Docker setup is questionable).
pferde 9y ago
There should still be http://silcnet.org/ http://silcnet.org/ although I have no idea what is the development status these days. Several years ago, it was quite lively, and looked promising.

cyphar 9y ago

> I've been looking for a secure alternative to IRC. Looking through this: Have you looked at Matrix[1]? It's federated, also has multiparty OTR-like encryption, supports multiple devices for each user (with granular trust). And they have many different clients. It also synchronises your chat history. > Is there a way to turn off forward secrecy? For many uses cases you don't want it. I guess you can always add a way after the fact (e.g. by including previous key in each new message) I believe that you'd always want forward secrecy for any transmitted information. However, you could do what Signal does by storing all of your messages with a single encryption key (so you don't store all of the historic keys, which would be bad). [1]: https://matrix.org/ https://matrix.org/

daurnimator 9y ago
> Have you looked at Matrix Yes I have. Have been working on a kubernetes setup for it last week infact: http://github.com/hashbang/kubernetes-matrix http://github.com/hashbang/kubernetes-matrix
- cyphar 9y ago
  Cool, I might spin that up on my local Kubernetes cluster. I was thinking about how hard it would be to self-host a Matrix server (I didn't see any k8s configurations published, and their Docker setup is questionable).

pferde 9y ago

There should still be http://silcnet.org/ http://silcnet.org/ although I have no idea what is the development status these days. Several years ago, it was quite lively, and looked promising.