2 ms·

Personally I use Matrix [0], specifically the Element client [1] which was previously known as Riot. Among other features, it has end-to-end encryption, federa

by Youden 6y ago

Personally I use Matrix [0], specifically the Element client [1] which was previously known as Riot. Among other features, it has end-to-end encryption, federation, comprehensive support for multiple devices and doesn't require a phone number. Basically, as far as I'm concerned, it has all of Signal's security but none of its flaws. For the Android folks, it's available on F-Droid as well as the Play Store. Surprisingly, despite the features and security, it's approachable enough that my mostly tech illiterate wife is able to handle it without issues. [0]: https://matrix.org/ https://matrix.org/ [1]: https://element.io/ https://element.io/

codethief 6y ago
> it has all of Signal's security but none of its flaws. What about metadata protection? Whenever I hear people talk about how unsupportive Signal / Moxie is of federation and how federation would be better for everyone's privacy, my question is this: In case of Signal you only need to trust one provider (Signal) with your metadata (who's talking to whom) whereas with a federated network you have to trust your provider and all providers your friends use. On top of that Signal has a track record of standing in for their users' privacy[0]. That probably can't be said about the administrator of some random Matrix server. [0]: https://signal.org/bigbrother/eastern-virginia-grand-jury/ https://signal.org/bigbrother/eastern-virginia-grand-jury/
- Youden 6y ago
  > whereas with a federated network you have to trust your provider and all providers your friends use. Currently, yes, you're right. However Matrix is actively working on eliminating this problem in various ways. The most recent reference I know of is [0]. However I don't think the state of things today leaves a clear winner. Right now it's a tradeoff. You can either trust Signal and put all of your communications in the hands of a single third-party (so single point of failure) or you can use Matrix and deal with the levels of trust you're happy to place in your friends' homeservers (but gain multiple points of failure). [0]: https://fosdem.org/2020/schedule/event/dip_p2p_matrix/ https://fosdem.org/2020/schedule/event/dip_p2p_matrix/

by Youden 6y ago

codethief 6y ago

> it has all of Signal's security but none of its flaws. What about metadata protection? Whenever I hear people talk about how unsupportive Signal / Moxie is of federation and how federation would be better for everyone's privacy, my question is this: In case of Signal you only need to trust one provider (Signal) with your metadata (who's talking to whom) whereas with a federated network you have to trust your provider and all providers your friends use. On top of that Signal has a track record of standing in for their users' privacy[0]. That probably can't be said about the administrator of some random Matrix server. [0]: https://signal.org/bigbrother/eastern-virginia-grand-jury/ https://signal.org/bigbrother/eastern-virginia-grand-jury/

Youden 6y ago
> whereas with a federated network you have to trust your provider and all providers your friends use. Currently, yes, you're right. However Matrix is actively working on eliminating this problem in various ways. The most recent reference I know of is [0]. However I don't think the state of things today leaves a clear winner. Right now it's a tradeoff. You can either trust Signal and put all of your communications in the hands of a single third-party (so single point of failure) or you can use Matrix and deal with the levels of trust you're happy to place in your friends' homeservers (but gain multiple points of failure). [0]: https://fosdem.org/2020/schedule/event/dip_p2p_matrix/ https://fosdem.org/2020/schedule/event/dip_p2p_matrix/