3 ms·

Matrix has e2e but it's a pain in the ass to use (every time you log on a different browser of from a different client you have to import keys and validate clie

Matrix has e2e but it's a pain in the ass to use (every time you log on a different browser of from a different client you have to import keys and validate clients). So most hub I have seen don't enforce users to use e2e and at least images are stored in the clear on the matrix server.

rglullis 7y ago
XMPP is still somewhat similar. But in any case it is an issue with the existing UX, not inherent to federated systems. I am not claiming it is easier. I am not even claiming it is easier than in the current centralized solutions. I am just saying that it is possible and that we don't need to throw the baby with the bathwater. It is much easier to improve on the existing federated solutions than trying to come up with some idealistic, absolutely-private decentralized technology.
MayeulC 7y ago
That's true, but cross-signing is right around the corner for Matrix [1], which will enable e2e by default in direct chats [2]. Encryption is useless for most public rooms, and actually counter-productive most of the time. If the room is public, anybody can join it, idle there and save the logs on their computer, or publish them. Activating encryption is just annoying: from the top of my head, you can't read what was posted before you joined (unless someone sends you their keys), search is client-side only, it's hard to link to attachments or reuse mxc: (matrix content such as images) from one channel to another. [1]: https://github.com/vector-im/riot-web/issues/2714 https://github.com/vector-im/riot-web/issues/2714 and the two links below [1]: https://github.com/vector-im/riot-web/issues/10605 https://github.com/vector-im/riot-web/issues/10605 and associated labels [1]: https://github.com/vector-im/riot-web/issues?q=is%3Aissue+is%3Aopen+cross+sign+label%3Across-signing-sprint https://github.com/vector-im/riot-web/issues?q=is%3Aissue+is... [2]: https://matrix.org/blog/2018/11/02/user-experience-preview-end-to-end-encryption-by-default/ https://matrix.org/blog/2018/11/02/user-experience-preview-e... [2]: https://github.com/vector-im/riot-web/issues/6779 https://github.com/vector-im/riot-web/issues/6779
- johnchristopher 7y ago
  That's really nice ! I hope the work on riot UI will continue.

rglullis 7y ago

XMPP is still somewhat similar. But in any case it is an issue with the existing UX, not inherent to federated systems. I am not claiming it is easier. I am not even claiming it is easier than in the current centralized solutions. I am just saying that it is possible and that we don't need to throw the baby with the bathwater. It is much easier to improve on the existing federated solutions than trying to come up with some idealistic, absolutely-private decentralized technology.

MayeulC 7y ago

That's true, but cross-signing is right around the corner for Matrix [1], which will enable e2e by default in direct chats [2]. Encryption is useless for most public rooms, and actually counter-productive most of the time. If the room is public, anybody can join it, idle there and save the logs on their computer, or publish them. Activating encryption is just annoying: from the top of my head, you can't read what was posted before you joined (unless someone sends you their keys), search is client-side only, it's hard to link to attachments or reuse mxc: (matrix content such as images) from one channel to another. [1]: https://github.com/vector-im/riot-web/issues/2714 https://github.com/vector-im/riot-web/issues/2714 and the two links below [1]: https://github.com/vector-im/riot-web/issues/10605 https://github.com/vector-im/riot-web/issues/10605 and associated labels [1]: https://github.com/vector-im/riot-web/issues?q=is%3Aissue+is%3Aopen+cross+sign+label%3Across-signing-sprint https://github.com/vector-im/riot-web/issues?q=is%3Aissue+is... [2]: https://matrix.org/blog/2018/11/02/user-experience-preview-end-to-end-encryption-by-default/ https://matrix.org/blog/2018/11/02/user-experience-preview-e... [2]: https://github.com/vector-im/riot-web/issues/6779 https://github.com/vector-im/riot-web/issues/6779

johnchristopher 7y ago
That's really nice ! I hope the work on riot UI will continue.