4 ms·
> My takeaway is that for truly private chat one should write his own software That's the only way to make sure you're using software you trust, but rolling yo
by xdennis 4y ago
> My takeaway is that for truly private chat one should write his own software
That's the only way to make sure you're using software you trust, but rolling your own crypto implementations is often not so secure (because of the many pitfalls).
- tpetry 4y agoYou don't have to roll your own crypto. You can e.g. just use libsodium which is designed to be easy-to-use and not possible to use incorrectly.
- atq2119 4y agoUsing libsodium is good advice, but all crypto libraries can be used incorrectly.
- rich_sasha 4y agoI'd have no idea where to start securing an app against side channel hacks. Is the memory encrypted? Should it be? Can other apps access it? E2E might be working fine, its the ends I'd be concerned about.
- tough 4y agoNarcs did this and alas the FBI ended up turning the guy who wrote their software to turn on them all.. so hard for a criminal mastermind to also be a good programmer I think
- tivi 4y agoyou could run your own xmpp or matrix instances.