5 ms·

What bothers me the most with the current on-premises chat solutions is the lack of a true alternative for jabber/xmpp with OTR (or equivalent e2e encryption) s

What bothers me the most with the current on-premises chat solutions is the lack of a true alternative for jabber/xmpp with OTR (or equivalent e2e encryption) support. I honestly hate that in 2018 there is no way to move away from Pidgin/Adium if you want to keep this functionality. - RocketChat - OTR breaks very easily, and https://github.com/RocketChat/Rocket.Chat/pull/10094 https://github.com/RocketChat/Rocket.Chat/pull/10094 has been open for months - Matrix / Riot - Last I tried it had the most complex and unusable interface - Mattermost - At first glance seems to include E2E, but when reading a little bit more...not really, just at rest encryption - https://mattermost.atlassian.net/browse/MM-669 https://mattermost.atlassian.net/browse/MM-669 - Zulip - nop - https://github.com/zulip/zulip/issues/6096 https://github.com/zulip/zulip/issues/6096 - Movim - nop - https://github.com/movim/movim/issues/63 https://github.com/movim/movim/issues/63 ...

lucideer 8y ago
Matrix / Riot is not there yet, but is improving UX-wise. The flipside is that the popularity of the Matrix.org homeserver has caused scaling/performance issues lately (having a distributed/federated protocol is only easy to scale if you actively encourage users to diversify their homeserver choice). Still though, despite three teething issues, I genuinely think it's the most promising. E2E is working better than it was anyway.
ge0rg 8y ago
OTR hasn't aged very well (it doesn't support asynchronous communication, multiple parties or multiple clients per party). For XMPP there is OMEMO, which is gaining traction (and is based on the Signal ratchet), but like with OTR, the forward secrecy it provides might be unwanted or even forbidden in corporate environments where you have retention policies in place. E2EE is great for private chats over an untrusted cloud provider, but really not a priority in enterprise environments.

lucideer 8y ago

Matrix / Riot is not there yet, but is improving UX-wise. The flipside is that the popularity of the Matrix.org homeserver has caused scaling/performance issues lately (having a distributed/federated protocol is only easy to scale if you actively encourage users to diversify their homeserver choice). Still though, despite three teething issues, I genuinely think it's the most promising. E2E is working better than it was anyway.

ge0rg 8y ago

OTR hasn't aged very well (it doesn't support asynchronous communication, multiple parties or multiple clients per party). For XMPP there is OMEMO, which is gaining traction (and is based on the Signal ratchet), but like with OTR, the forward secrecy it provides might be unwanted or even forbidden in corporate environments where you have retention policies in place. E2EE is great for private chats over an untrusted cloud provider, but really not a priority in enterprise environments.