4 ms·

So MIMI is a server-server protocol... even worse than what I thought, it is a "interop" client-server protocol which should be worked on. Because signal or wh

So MIMI is a server-server protocol... even worse than what I thought, it is a "interop" client-server protocol which should be worked on. Because signal or whatsapp, same same to me, I don't want them, but I would need to interact with some people there: namely create an account, and use a light open source client (not using any of those grotesquely and absurdely massive and complex web engines... and their SDK). I have a very bad feeling about this. EU regulators seems to miss the point: in this very case, it is the client protocol which should be open, stable in time and super ez to implement by even a normal individual dev (not the TLS part ofc). Then, there is the account creation or guest account, etc. A friend told me EU started to emit user specific certificates.

jeroenhd 3y ago
I don't see why we would specifically need an open client protocol, the goal is to prevent gatekeepers from locking users inside their networking effect. The EU does not state specifically how gatekeepers must open up their services. For all we know, iMessage will open up a web API that offers the same functionality rather than sticking to MIMI. The IETF called for a unified protocol and people from several projects started laying down their requirements and suggestions, that's it. In my personal opinion, an open server-to-server system would be better than an open client. An open client protocol would pretty much limit messengers in their functionality for the next ten years, because WhatsApp couldn't possibly alter their image upload API unless they're willing to risk an EU investigation. You'd also end up with ten different APIs, all in various states of feature support and implementation details, and if someone does manage to make a unified app, you'd end up with ten different contacts for the same person. You're never getting a simple client API with modern chat messengers. E2EE is practically a requirement these days, and E2EE is hard to accomplish. Requiring a simple client would actually make the situation worse, allowing the EU to basically force chat apps to break their E2EE properties because of "API compatibility" reasons. I don't think anyone but the worst politicians want that. I don't know anything about user specific certificates. There are some EU countries that permit authenticating to government services using a smart card, but that's got very little to do with this whole system. It's certainly not something we use to authenticate with chat services.
- sylware 3y ago
  Allright, we do not agree since we are not talking about the same thing: I am talking about client interop, namely not using Big Tech web engines. This is what I am expecting from EU regulators.

jeroenhd 3y ago

I don't see why we would specifically need an open client protocol, the goal is to prevent gatekeepers from locking users inside their networking effect. The EU does not state specifically how gatekeepers must open up their services. For all we know, iMessage will open up a web API that offers the same functionality rather than sticking to MIMI. The IETF called for a unified protocol and people from several projects started laying down their requirements and suggestions, that's it. In my personal opinion, an open server-to-server system would be better than an open client. An open client protocol would pretty much limit messengers in their functionality for the next ten years, because WhatsApp couldn't possibly alter their image upload API unless they're willing to risk an EU investigation. You'd also end up with ten different APIs, all in various states of feature support and implementation details, and if someone does manage to make a unified app, you'd end up with ten different contacts for the same person. You're never getting a simple client API with modern chat messengers. E2EE is practically a requirement these days, and E2EE is hard to accomplish. Requiring a simple client would actually make the situation worse, allowing the EU to basically force chat apps to break their E2EE properties because of "API compatibility" reasons. I don't think anyone but the worst politicians want that. I don't know anything about user specific certificates. There are some EU countries that permit authenticating to government services using a smart card, but that's got very little to do with this whole system. It's certainly not something we use to authenticate with chat services.

sylware 3y ago
Allright, we do not agree since we are not talking about the same thing: I am talking about client interop, namely not using Big Tech web engines. This is what I am expecting from EU regulators.