4 ms·
What worries me is that even though they don't own the data, they could be forced to push an update that will upload decrypted messages from people's phones. No
by stabbles 5y ago
What worries me is that even though they don't own the data, they could be forced to push an update that will upload decrypted messages from people's phones. Not owning the client would be better
- zaik 5y agoNot owning any server would also help. Metadata, contacts and groups can easily be recorded if you own the server. Federation is a big reason why I consider XMPP superior to Signal.
- ViViDboarder 5y agoFederated servers are still servers. It’s nothing for the FBI to subpoena any server you’ve connected to and then any server that server connected to, etc. The important thing is minimizing the data that is collected, period. Otherwise you’re just obscuring the data storage.
- zaik 5y ago> It’s nothing for the FBI to subpoena any server you’ve connected to I can choose to use a server outside the US. I can choose to run a server in my basement and still talk to all my contacts. You simply do not have this freedom with Signal. Finally, I do not have to trust anyone about what (meta-)data is collected.
- ViViDboarder 5y agoIf you chose a server in your basement, then it’s communicating with federated servers. Those servers that your friends use have the same data that you’ve sent to them. So they don’t even need to find your main server, just collect enough. An out of the US host is easier for them actually. Say hello to NSA exploits without a warrant! Have you looked to see what metadata something like Matrix collects? How federation and contact lists work on that server?