3 ms·
>serious alternatives How is Quill Chat that's proprietary and not E2EE a serious alternative? Element's UX is behind Signal but at least the encryption is E2
by maqp 5y ago
>serious alternatives
How is Quill Chat that's proprietary and not E2EE a serious alternative?
Element's UX is behind Signal but at least the encryption is E2EE by default.
Session is a Signal fork with bad metadata protection: There's 60 entities owning Loki nodes, and top three players own 80% of nodes.
Delta chat leaks metadata to email providers, and PGP has no forward secrecy or deniability.
Element is the only one that's even remotely fixing the issue.
The issue here was client side, and no architectural design, not even hardware system can prevent the "wrong contact receives plaintext message" vulnerability categorically.
The fix is now in place, and I'll eat my shorts if they don't have a unit test in place to detect reintroduction of this issue.
- h_anna_h 5y ago> Delta chat leaks metadata to email providers, and PGP has no forward secrecy or deniability. Signal leaks metadata to the signal server. Deniability is useless. Forward secrecy is cool as long as you are not using more than one device.
- henryaj 5y agoSignal publishes their response to any subpoenas they receive; they only ever respond with the timestamp of when the user in question signed up and when they were last active - which I guess implies that's all the data they have? https://signal.org/bigbrother/eastern-virginia-grand-jury/ https://signal.org/bigbrother/eastern-virginia-grand-jury/
- deleted 5y ago[deleted]