4 ms·

This is pretty rich coming from the founder of Telegram, which doesn't have any End to End encryption by default, nor are group chats encrypted in any way. Cli

This is pretty rich coming from the founder of Telegram, which doesn't have any End to End encryption by default, nor are group chats encrypted in any way. Client devices have many routes of compromise available, it's very possible that the data exfilaration is occuring there rather than server side. You'd think the backers of Matrix (largely European Governments) or the privacy focused userbase of XMPP would go beyond forklifting in the same double rachet library that Signal and ilk use, but apparently they all think it's the best available option.

Arathorn 2y ago
On the Matrix side, we explicitly didn't forklift the same library - we wrote our own cleanroom implementation from scratch, first in C/C++ as https://gitlab.matrix.org/matrix-org/olm https://gitlab.matrix.org/matrix-org/olm and then in rust as https://github.com/matrix-org/vodozemac https://github.com/matrix-org/vodozemac. They have no code at all in common with libsignal, and are Apache licensed rather than copyleft, and have been independently audited, independent of whatever Signal gets up to (https://matrix.org/blog/2016/11/21/matrix-s-olm-end-to-end-encryption-security-assessment-released-and-implemented-cross-platform-on-riot-at-last/ https://matrix.org/blog/2016/11/21/matrix-s-olm-end-to-end-e... and https://matrix.org/blog/2022/05/16/independent-public-audit-of-vodozemac-a-native-rust-reference-implementation-of-matrix-end-to-end-encryption/ https://matrix.org/blog/2022/05/16/independent-public-audit-... respectively)
- 2Gkashmiri 2y ago
  off the topic but any updates on eu dma integration with messenger et al? also, an unanswered question remaining was that the integration with meta viz DMA would apply to element only or the matrix ecosystem in general like i would be able to use fluffychat or cinny for example
- simfree 2y ago
  You have steadfastly spread the good word in spite of undue negativity directed towards the Matrix ecosystem. Thank you for your hard work on making Matrix better for everyone and explaining why in depth! You make the world a better place!
- realityfactchex 2y ago
  Good to know, and keep it up!
pjfin123 2y ago
To be fair trying to do encrypted group chats isn't at all straightforward.

Arathorn 2y ago

On the Matrix side, we explicitly didn't forklift the same library - we wrote our own cleanroom implementation from scratch, first in C/C++ as https://gitlab.matrix.org/matrix-org/olm https://gitlab.matrix.org/matrix-org/olm and then in rust as https://github.com/matrix-org/vodozemac https://github.com/matrix-org/vodozemac. They have no code at all in common with libsignal, and are Apache licensed rather than copyleft, and have been independently audited, independent of whatever Signal gets up to (https://matrix.org/blog/2016/11/21/matrix-s-olm-end-to-end-encryption-security-assessment-released-and-implemented-cross-platform-on-riot-at-last/ https://matrix.org/blog/2016/11/21/matrix-s-olm-end-to-end-e... and https://matrix.org/blog/2022/05/16/independent-public-audit-of-vodozemac-a-native-rust-reference-implementation-of-matrix-end-to-end-encryption/ https://matrix.org/blog/2022/05/16/independent-public-audit-... respectively)

2Gkashmiri 2y ago
off the topic but any updates on eu dma integration with messenger et al? also, an unanswered question remaining was that the integration with meta viz DMA would apply to element only or the matrix ecosystem in general like i would be able to use fluffychat or cinny for example
simfree 2y ago
You have steadfastly spread the good word in spite of undue negativity directed towards the Matrix ecosystem. Thank you for your hard work on making Matrix better for everyone and explaining why in depth! You make the world a better place!
realityfactchex 2y ago
Good to know, and keep it up!

pjfin123 2y ago

To be fair trying to do encrypted group chats isn't at all straightforward.