3 ms·

E2E chat is an interesting topic. Say I'm using XMPP, my own server, talking to a federated one, all over TLS, including S2S. E2E on top of that, in my persona

by pmlnr 6y ago

E2E chat is an interesting topic. Say I'm using XMPP, my own server, talking to a federated one, all over TLS, including S2S. E2E on top of that, in my personal opinion, is a massive overkill for most cases and people. Related read: https://homebrewserver.club/have-you-considered-the-alternative.html#cryptography-matters-but-then-it-also-doesnt https://homebrewserver.club/have-you-considered-the-alternat... It is, however, different, when it comes to a server that I don't control in any form. In that scenario, it is rather useful, but I'm still a lot more worried about the unencrypted meta surrounding it. See email and PGP in this topic, which has always been a pain point for many. Thoughts?

pampa 6y ago
> Thoughts? Pick your adversaries and scale your opsec accordingly. Unless you are a person of interest in national security matters, just the fact that you communicated with somebody does not incriminate you.
kitkat_new 6y ago
Honestly you have no idea about real use cases. Almost no one is going to set up a dedicated local server for all of his conversations, hosting only conversations in which you are part of anyways. Most people aren't even able to do this.
- pmlnr 6y ago
  > Almost no one is going to set up a dedicated local server for all of his conversations 85000 Prosody servers disagree to some level :) https://news.ycombinator.com/item?id=25713679 https://news.ycombinator.com/item?id=25713679
  - kitkat_new 6y ago
    in other words, almost no one compared to at least 2 billion potential users.
    - pmlnr 6y ago
      > at least 2 billion potential users. I know people tend to dream big, but... come on.