|
Top-level
 The only really secure messenger is Matrix, but it is quite unusable. The best client i have found is FluffyChat which is at least on par with WhatsApp all considered. Sadly Telegram has by far the best UI, UX and Dev UX there is of all messengers, which is why i like to use it, also it is fast as heck. 22 comments
I have recently and my experience was quite shitty and it is so bad that i cannot use it. I posted about it a bit, the only thing that somewhat remotely is usable for me is FluffyChat and they do not support a lot of great accessibility stuff i want, like voice messages that you can convert to text easily, send quick videos, send your location for the next hour or have a "send without sound/ send when online" features.  @m yeah, the whole encrypted IM space is and has always been a clusterfsck. Sigh. :sad_cat:  What do you think about XMPP with OMEMO? Would be nice to have a decentralised alternative to Signal. I _love_ XMPP, I've run a long time a ejabberd server and it was really my favorite until now. Especially this stuff is _fast_ and the extension system is just technically awesome. _but_ no one uses it (ik ik WhatsApp but lets be real here, this is not XMPP as in "i use XMPP for IM") So, if XMPP had more people using it, and it was easier to sign up, there's nothing fundamentally wrong with it? I've been playing around with Snikket as a potential way to get more people trying XMPP. Have you any views on it? For what it's worth, the default Snikket app has OMEMO on by default, voice/video calls and voice messages, plus image/document/location attachments, but it doesn't have stickers or GIF pickers. @FediThing @m I don't have strong opinions on it other than when I tried XMPP the usability was always an issue. I know there are projects like Snikket that made great strides on this front though.  @FediThing@social.chinwag.org @rysiek@mstdn.social @m@lgbtqia.space Besides Matrix, another decentralized alternative to Signal with no phone number required is Delta Chat (as mentioned by others here like @kkarhan and @andrewg). It won't support all of the same features (but it does support some features which Matrix doesn't provide, like disappearing messages) and it should be easy to sync messages between devices. Downstream Delta Lab supports Telegram stickers.  @rysiek @m imho matrix is still better than telegram in this respect, and if not using a phone number or not having (latest) android/ios phone is important then i don’t know if there’s better choice. (i know about jami and briar, but they fill a different niche and syncing messages between devices seem a hassle, if possible at all) @rysiek @m Apparently, these issues were already known and not considered to be serious, which is why they remained. https://mastodon.social/@krille@troet.cafe/112965796119221788 PS: If the issues were as basic and far-reaching as the blog insinuates, why are multiple countries using Matrix for their military and administration? @ArcaneAlchemist it's not "some blog", Soatok is a solid security researcher. Ignore his insight at your own peril. Also, did you really just argue that surely a certain solution is perfectly fine because nation states use it? Really? :blob0w0: Because that would make Microsoft Teams by far the best communication solution in the world. @rysiek @m I'm judging it as a "blog" because of the style of language and the disclaimer at the beginning. I'm not saying Matrix is perfect, but considering that (at least Germany) is actively contributing to it, I expect that they also have experienced security researchers looking at the codebase. To use your argument, why go through all that effort if they could have just used WebEx and Teams? Arguing that the devs and auditors are all incompetent is a bit far fetched, don't you think? @ArcaneAlchemist I am not arguing that "devs and auditors are all incompetent", please kindly refrain from putting words in my mouth. People miss things all the time. The fact that A Large Organization or State is using a given tool does not necessarily mean they audited it. And even if they have, it doesn't mean there are no security issues. I linked to a specific piece of information on specific security issues found by a good security researcher. Do what you will with that info. 🤷♀️  While there are reasons why you might want to create a new inbox / address just to use for Delta Chat, this is not a requirement! You can use an existing inbox / address as a dual use traditional email / delta chat address. And if you want to keep your inbox free of clutter, you can tell Delta Chat to automatically delete messages from the server after downloading them, or use a filter to automatically move emails sent by Delta Chat to a separate folder on the server. |
Gregory's Server
@m you might want to double check on Matrix though:
https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/
Matrix is a decent IRC replacement, but a secure messenger it is not. I've always felt that encryption was bolted-on as an afterthought in it and that that will lead to tears, and as time goes by I get more and more proof of this.