3 ms·
Ah yes, so you can host your own plaintext on your XMPP server and not get end-to-end encryption.
by some_furry 1y ago
Ah yes, so you can host your own plaintext on your XMPP server and not get end-to-end encryption.
- ezst 1y agoFor the record, XMPP has OMEMO as its standard E2E/PFS-preserving encryption protocol (based on your usual double-ratchet aka Signal encryption), which is regularly audited for security (and as recently as last month in the case of the Conversations Android client). XMPP being used by several law enforcement agencies and institutions like NATO, I wouldn't default to making fun of its security.
- some_furry 1y agohttps://soatok.blog/2024/08/04/against-xmppomemo/ https://soatok.blog/2024/08/04/against-xmppomemo/ OMEMO is not always-on like Signal, so it doesn't even compare.
- methuselah_in 1y agoyou sure?
- some_furry 1y agoYes, this is obviously true because XMPP has a plaintext mode.
- ezst 1y agoThis is such a non-argument. Every non-toy XMPP client supports OMEMO¹, so it makes no practical difference. Signal only supports one single official client and will cut you from your account if you happen to have ergonomics, accessibility or platform preferences that are not supported by Signal. That's the price to pay for Signal's "universal defaults", and that's a tough one if you ask me. ¹: https://omemo.top/ https://omemo.top/