3 ms·
and yes.. I agree with nearly everything you said in your post mikekchar. The one thing I would keep in mind is elevating a person's opinion because: "recogniz
by dngray 7y ago
and yes.. I agree with nearly everything you said in your post mikekchar.
The one thing I would keep in mind is elevating a person's opinion because: "recognized security expert".
Their comments should be taken at face value and not given any extra special value because of "who they come from".
I purposely leave my background, education and employment out of my comments for that reason. I would not want my opinions to be judged more highly because of where I work.
> He doesn't care that it doesn't do the things that it doesn't do because he thinks those things are less important.
Just because he doesn't care doesn't make them any less of an issue.
On that note Matrix also offers a similar method with the phone number (it's optional to use a phone number) and if you do use it, the identity server can link you with other people that use it. https://matrix.org/docs/projects/other/sydent https://matrix.org/docs/projects/other/sydent (that's also optional, you can run a matrix server without it).
Ideally the best usage would be to have two accounts, an account with your phone number you use with people that know you, (family, work etc) and one you use for random people on the internet that does not.
Signal laid a lot of the ground work with https://en.wikipedia.org/wiki/Double_Ratchet_Algorithm https://en.wikipedia.org/wiki/Double_Ratchet_Algorithm hopefully now Matrix can take it to the next level (next generation), like email.
Their cross-signing stuff looks to be particularly interesting. https://github.com/matrix-org/synapse/issues/4110 https://github.com/matrix-org/synapse/issues/4110