3 ms·

A) I see that nowhere in this post, so the author must have retracted it when he found that out. B) Matrix has always been very easy to set up E2E C) Matrix i

A) I see that nowhere in this post, so the author must have retracted it when he found that out. B) Matrix has always been very easy to set up E2E C) Matrix is now E2E by default, at least with the client non-technical users will be using. I think it is for the other clients as well, but I do not know for sure.

tptacek 6y ago
Yes, the author ghost-edited it out of his post, months later. You can see the original on Archive.org. Matrix was years from being E2E by default when this post, and that recommendation, was written.
- Shared404 6y ago
  > Yes, the author ghost-edited it out of his post, months later. It was still removed. Would it have been better to leave a note saying it had been? Yes. Nobody is perfect however. > Matrix was years from being E2E by default when this post, and that recommendation, was written. See point B from my other comment. Edit: Add Would ... however.
  - tptacek 6y ago
    I'm not sure how point B is relevant. Obviously, every message board argument about bad UX is going to feature someone saying that the UX is just fine. Telling vulnerable users to adopt a tool that is default plaintext is malpractice.
    - Shared404 6y ago
      Whenever I moved my friends onto Matrix, all I had to do was hit the "Encrypt room" button for each of our rooms. They did not have to do anything else. Is this ideal? No. Is it E2E for their other rooms? No. Is it E2E for any usage of matrix they were going to be doing? Yes. I also told them to be sure to hit that button if they did start any other rooms. None of them ever did, but they knew that they should if they cared about being secure. Riot.im also did a good job of letting you know that it was unencrypted unless you hit that button. Edit: What it boils down to, is that Matrix has been easy to set up E2E for as long as I can remember. It is also trivial to create a matrix account with no tie to your IRL self.

tptacek 6y ago

Yes, the author ghost-edited it out of his post, months later. You can see the original on Archive.org. Matrix was years from being E2E by default when this post, and that recommendation, was written.

Shared404 6y ago
> Yes, the author ghost-edited it out of his post, months later. It was still removed. Would it have been better to leave a note saying it had been? Yes. Nobody is perfect however. > Matrix was years from being E2E by default when this post, and that recommendation, was written. See point B from my other comment. Edit: Add Would ... however.
- tptacek 6y ago
  I'm not sure how point B is relevant. Obviously, every message board argument about bad UX is going to feature someone saying that the UX is just fine. Telling vulnerable users to adopt a tool that is default plaintext is malpractice.
  - Shared404 6y ago
    Whenever I moved my friends onto Matrix, all I had to do was hit the "Encrypt room" button for each of our rooms. They did not have to do anything else. Is this ideal? No. Is it E2E for their other rooms? No. Is it E2E for any usage of matrix they were going to be doing? Yes. I also told them to be sure to hit that button if they did start any other rooms. None of them ever did, but they knew that they should if they cared about being secure. Riot.im also did a good job of letting you know that it was unencrypted unless you hit that button. Edit: What it boils down to, is that Matrix has been easy to set up E2E for as long as I can remember. It is also trivial to create a matrix account with no tie to your IRL self.