Email or username:

Password:

Forgot your password?
dansup

sup. is an open source encrypted fediverse instant messenger, similar to whatsapp, made by pixelfed.

The beta will be launching later this month, and btw most fediverse accounts will work, not just Pixelfed 😉

180 comments
OceanBlue

@dansup @Yuvalne Any the reason you're not going with MLS from the IETF? It seems like the whole industry is going that way because of the Digital Markets Act.

Fish Id Wardrobe

@dansup @Yuvalne Does "the Signal protocol" mean that, like Signal, I have to give someone my phone number? I assume not, but…

ilyess

@fishidwardrobe I don't think there's any requirement for phone numbers in the #Signal Protocol.

They all sound similar but the Signal Protocol (the technical spec; also used by WhatsApp), The Signal Foundation (the non-profit entity behind Signal), and Signal (the messaging service) are all different things.

@dansup @Yuvalne

Kainoa

@fishidwardrobe@mastodon.me.uk @dansup@mastodon.social @Yuvalne@433.world no, my guess is that it'll use the encryption standards provided by libsignal without using signal's services.

silverpill

@dansup @Yuvalne

Please consider MLS, end-to-end encryption protocol standardized by IETF: https://blog.phnx.im/rfc-9420-mls/

Matrix and some other messengers are going to adopt it, so there's a possibility that we can interoperate with them in the future.

DELETED

media description:
big title: "sup."
subtitle: "opensource encrypted federated indtant messanger"

dolies

@ana Good point, though a point is a dot, and @dansup's sup has a trailing one.

Caesar

@dansup sounds exciting, but at the same time I'm curious what problems it solves that aren't solved by Matrix, and whether it's worth fragmenting the ecosystem with yet another chat system that doesn't interoperate with existing ones.
Is any technical information available yet?

l'empathie mécanique

@dansup So, a Fediverse node, but with only DMs enabled?

Stephen Radford :telly:

@dansup Do you have any details about the encryption protocol? Is it E2EE?

dameoutlaw

@steve @dansup It’s utilising Signal Protocol which is E2EE

dameoutlaw

@steve You’re welcome and I wasn’t just some random person butting in. I’ve migrated my account. For some reason the migration has gone poorly

dameoutlaw

@steve is it possible for Bean to get a midnight/dim mode?

dameoutlaw

@steve correct. I know for some users like myself with vision sensitivity either or can be too much. With Twitter I regularly used dim mode and it was the easiest on my eyes no matter the time of day.

Stephen Radford :telly:

@dameoutlaw Okay, I’ll add it do the list along with some other ideas I have 😊

dansup

The mobile app is written in React Native, and the backend in async PHP (surprisingly high perf).

Both client and server code will be open sourced when we release the beta, and we'll target F-Droid support and TestFlight!

I will maintain the primary sup. server, but you will be able to run your own, and connect from the app easily!

(ノ◕ヮ◕)ノ*:・゚✧*:・゚✧

@dansup I love your ideas and concepts but I have to admit I’m very sad to hear that the iOS version will be written in react native and not swift ui. I really wanted to like pixelfed, but the app feels very out of place on iOS and janky not because it’s not a well made app (it is) but it feels very “androidy” on iOS which will not bode well for adoption, and lead me to delete it and go back to browsing pixelfed via Mona app instead.

dansup

@tweece The latest build is much smoother (but sadly isn't out yet), but you do you!

(ノ◕ヮ◕)ノ*:・゚✧*:・゚✧

@dansup I never said it wasnt smooth, it very much is! Just feels out of place and not very native on iOS. Until a swift ui alternative comes out, I think signal app is still the best option on iOS for messaging

fakeCheese

@tweece@techhub.social @dansup@mastodon.social

Though, a benefit of of sup over signal would be not needing a phone number to sign up for an account, though. Can use pre-existing handle or make a new one.

Me personally, I would take the extra privacy over the sacrifice of the UI being a little non-native in sup, if that winds up being the case. As long as the encryption methods are up to par.

Not to mention there will be the option of running a personal instance, so then the encrypted messages aren't even stored on someone else's server to get hacked and cracked.

I don't have the time to run a server myself rn but the option presumably will be there for people who can run their own server and need that level of privacy.

@tweece@techhub.social @dansup@mastodon.social

Though, a benefit of of sup over signal would be not needing a phone number to sign up for an account, though. Can use pre-existing handle or make a new one.

Me personally, I would take the extra privacy over the sacrifice of the UI being a little non-native in sup, if that winds up being the case. As long as the encryption methods are up to par.

Not to mention there will be the option of running a personal instance, so then the encrypted messages...

Benjamin

@tweece @dansup huh? The Android App feels very iOSy to me :D

(ノ◕ヮ◕)ノ*:・゚✧*:・゚✧

@piratenpanda @dansup For example, the tab bar is opaque and doesn’t have the classic swift ui blur. The animations for opening posts and swiping to go back doesn’t have the same weight and physics you expect from iOS. When you click the profile tab, there’s an awkward back button in the top left that takes you back to the feed tab, which is very weird. The list goes on, the design language is at home on iOS but the experience feels like a website not an app made by Apple.

(ノ◕ヮ◕)ノ*:・゚✧*:・゚✧

@piratenpanda @dansup And honestly, if the app feels very “iOSy” on android that’s a problem too! The apps should feel native and at home on their relative platforms, not somewhere in the middle with one foot in each door

Bowreality

@tweece @dansup You can browse pixelfed through Mona??

(ノ◕ヮ◕)ノ*:・゚✧*:・゚✧

@bowreality @dansup Kinda! I’m still trying to figure it out, I can see when people repost pixelfed posts to their Mastadon, and you can add pixelfed communities to your community tab although pixelfed.social doesn’t work because it says it requires a logged in account. Then if you try and log in with a pixelfed.social account it gets most of the way past the login screen and then errors. It seems like there’s a missing link somewhere that should be easy to figure out

Bowreality

@tweece @dansup I tried signing up to pixelfed but never got it working. I would prefer having it here in Mona anyways. Too many accounts!

Aroop Roelofs :verified:

@dansup I mean tbf, modern PHP uses JIT so I'm not surprised it goes BRRRRRRRRR.

Amy 🇹🇭

@dansup Neato! Would be cool if this gets implemented as DMs. I don't personally use it but it would make it easier for other users

dansup

@ariadne Not yet, I'm going to publish an RFC before anything is shipped, and I'm going to get my buddy who created CryptPad to help with the crypto, I'm looking to implement the signal protocol (double ratchet). If your interested in helping or just critiquing haha, I'd love that!

Tim Panton

@dansup @ariadne you might want to look at MLS instead of signal, it supposedly has some advantages. (And an RFC)

Adrian McEwen

@steely_glint @dansup @ariadne

I'm assuming that's Messaging Layer Security? rfc-editor.org/rfc/rfc9420.htm

An RFC would be a big step up from piecing things together from code, and white papers from both Signal and Whatsapp(!), which was my experience getting libsignal working. That was back in 2018, though, so maybe the docs are better now.

A federated secure messaging client is a boss idea!

Tim Panton

@amcewen @dansup @ariadne
Yeah, I've been following along the progress of MLS and its looks like it now has quite a bit of momentum. It also has a (rust) reference implementation if I remember correctly.

Adrian McEwen

@steely_glint @dansup @ariadne
Bah, I'm trying to delay learning Rust as I've already got too many projects on the go 🤣

That does remind me though, I wonder what the Precursor betrusted.io/ is using for messaging (that's all Rust).

*checks*

Seems they're running at Matrix first, but a future Fediverse secure messaging client for that would be nice

DELETED

@steely_glint @dansup @ariadne
I think @dansup has just the right idea. The Signal protocol is the most recognized and respected E2EE technology out there. Tech casuals trust it, which is important for adoption.

Dan has hard work ahead, but if this reaches the point where Fediverse DM's across platforms default to E2EE encryption, that would be *huge*! Looking forward to the rollout and successful audits.

The Doctor

@ariadne @dansup We just found out about it. Probably not yet.

Ryan Lee Sipes ⚡🦅

@dansup hook me up with the opportunity to test. Maybe Thunderbird should support Sup.

Danny Colin

@ryanleesipes We already support Matrix which is standardized, open, decentralized and encrypted.

Akatsuki Levi
@dansup "instant messenger" "made by pixelfed" "encrypted fediverse" WhatsApp on my phone is gonna disappear and I ain't going to miss the family group
DELETED

@dansup And what is better with it compared to the things we already have ?

dansup

@crw great question, you are the first person who asked this!

The benefit is using your fediverse account (pixelfed, mastodon, pleroma) and being able to chat with your friends with real time notifications (ie: Dan is typing...)

DELETED

@dansup Aha, and how is the block / mute thing solved. I mean things like get fedi messages at a instance but mute to send and so on.

Parnikkapore

@dansup @crw
> using your fediverse account

Assuming that you're actually working with arbitrary APub accounts and not just using them as an auth provider, this is probably the most interesting part of this, especially wrt identifying devices (for the Signal protocol) and reducing delay

Mostly because, IMO, without this, there would be little benefit over speaking one of the two established federated chat protocols.

emurphy42

@dansup Will it come complete with ttly legit users who post "oh I hardly use this account, can we switch to sup" five seconds into a conversation?

steakfrite

@dansup Glad to see the pixelfed team is working hard on improving the fediverse by delivering on long awaited features !

Mizah

@dansup @Lingondraken How does it differ from Matrix? Does it run over ActivityPub?

Mon

@salva_pl ¿Y esto para que, existiendo XMPP que es el padre de todos ellos, incluyendo Whatsapp?

Salva

@xesfur na, es otra oferta más 🙂 y está federado. Por supuesto, donde esté XMPP que se quite todo, pero está bien ver que hay opciones que provienen de la comunidad, no de millonarios flipados y código más que cerrado.

Mon

@salva_pl Pero es que opciones de esas ya hay un montón. El problema es el de siempre: que las usamos cuatro.

DELETED

@xesfur @salva_pl Yo uso #Beeper, que me permite controlar mis apps de mensajería desde un solo lugar. No es perfecto, pero tiene su ventaja responder desde el mismo sitio whatsapp, telegram, DMs de Twitter, Matrix... Cuando esto salga seguramente me haga cuenta y lo controle con esta app.

Mon

@edmonde @salva_pl Yo solo utilizo Kontalk y XMPP. Con eso me apaño. De hecho, uso mi propio servidor XMPP. :-)

183231bcb

@dansup@mastodon.social Will it be compatible with either matrix or xmpp? If not, will it be compatible with any other E2EE messaging system?

Ralf

@dansup The idea is great, but why a new project? With MLS becoming a thing, supposed to support federation and being better in every way than the signal protocol, while the matrix protocol is an option as well. I've never heard that activityPub is famous for encryption and all the fediverse apps I know support direct (instand?) messaging, but never end to end encrypted.

Ralf

I'm just concerned at this point that instead of everybody being able to communicate with everybody, everybody makes their own protocol, that supports federation and we end up as we are now, you need 5 different apps, they all support federation but one matrix, one activitypub, one mls and so on...

PhilipKing

@mrrulf There’s that meme. ‘There are 11 competing protocols, we should make a standard’ Six months later ‘There are 12 competing protocols’. We’ve already seen this happen with fediverse directories and block lists. It’s concerning that we might see the same thing with messengers. By all means make a client but do we really need another standard.

Isotope

@dansup That's what I expected signal to be

matlag
@dansup How will it distinguish itself from XMPP or Matrix based messengers?
François Best

@dansup Looking forward to reading your RFC!

cc @soatok, who did some prior work on E2EE + ActivityPub.

Emme Ci 🍉

@dansup This is cool, and I can't wait to test it, but unless it can magically federate with WhatsApp/iMessage/etc. or you manage to convince my aunts and uncles to switch, it's just another app in a crowded space that missed the network effect by about 10 years.

I think that at this point the only viable solution to #opensource #messaging is to lobby the EU so that it forces the big players to #federate.

Jack

@dansup I've only ever used WhatsApp so forgive my possibly ignorant question, but could I message my WhatsApp contacts through this, or would we all need to be on the same platform?

Matt

@Jackthelad93 @dansup You'd have to be on the same platform, as WhatsApp doesn't federate (i.e. talk to other apps).

Jack

@mattswift @dansup I thought this might be the case, but wanted to confirm.

Thank you! 😁

Joseph

@dansup is this p2p, quantum cracking safe, reproducible, and self hostable

David Rudie

@rhrt but do we really need another IM? There’s SimpleX which is cool and secure, and open source to where you can run your own servers too. But I’ll still check out sup.

Ryan Hart

@davidrudie oh i didnt know about SImpleX. just saw more things for you to install

Carl Myrland

@dansup
Do you have a webpage or some sort of overview with details on what this app does and doesn't do?

I'm very intrigued by this app..

Carl Myrland

@dansup
Like what's the difference between sup and matrix? Since it's using the Signal protocol, will it be possible to communicate with Signal users from sup? What about group chats/channels, polls, video/audio calls etc etc etc..

sam.pavot.ca

@dansup@mastodon.social I imagine this will be a customized Signal server backend with authentication using a fediverse account instead of a phone number. How will it federate?

Chris J. Karr

@dansup

Can you set up a crowdfunding site for interested folks like me to chip in to pay for a third-party security review / audit?

This sounds amazing, but some extra eyes on the implementation to sign off on its robustness would be appreciated before I start relying on its E2EE.

Elegast

@dansup great name, but don't think I'll be in need of something like this. Just recently started using Beeper and really enjoying it. Maybe there will be a bridge in the future.

🇦🇲 կողմնակի անցանց (well, in this case literally)

@dansup@mastodon.social if it is feasible and not very hard, some people would enjoy it, if it has android api 16 (android 4) support. i know some with older phones. but whatever.

what does it do? creates contact list from contacts and sends private messages via activity pub? if other person has no such messenger, but has mastodon, will they receive the message?

Cătă

@dansup Friendica also supports syncing credentials with a ejabberd or prosody server. I, for example, can be contacted on XMPP on the same address as mine 😁

Wasn't this type of integration a more viable option for Pixelfed and others as well?

DELETED

@dansup Oh wow, was literally thinking about something like this for the past few months. Just being able to IM someone with just their fediverse handle. Encryption too!

Kalcifer

@dansup is it a Matrix client, or is it something completely separate? If it is the latter, why was it decided to not integrate with existing ecosystems?

pocket_

@dansup why not a simple matrix integration?

girl reaction ⭐️🔰🇺🇸🇵🇭

@dansup It would be super helpful if Pixelfed Implemented the ability to edit posts, before losing focus on entirely new projects.

YoYunix

@dansup so it’s matrix, but using a different protocol?

DELETED

@dansup I had no luck with Signal, I guess because Play Store is deactivated on my phone, as I’m trying to keep it sanitized before I can install Lineage OS, so I'm reeeeeally excited to this beta release. Thank you!

Dave :steamdeck:

@dansup As someone who always wants to test new encrypted messaging platforms (weird hobby, I know..) this is exciting to me.

farcaller

@dansup inb4 I'll need to have a 4th account, in addition to mastodon, lemmy, and pixelfed.

Felipe :wyd:

@ola What do you think? Could coyim implement activityPub?

R. L. Dane :debian: :openbsd:

@dansup

I honestly thought you were starting an announcement with "'sup?" XD

Scotty Trees

@dansup the fediverse needs encrypted message, this will definitely help the ecosystem overall.

Eric Malves :BirbBlj:

@dansup @KatSteelwing oooh! Is the protocol going to be open for other apps to implement? This could be a huge game changer for chat on fedi!

roger

@dansup interesting! Is it based on activitypub? How does it compare to matrix/element?

Florian

@dansup im curious about your motivation here. What does this offer that XMPP or Matrix don't?

Jay Baker (they/he)

@dansup Oh wow. The name alone is absolutely brilliant, for so many reasons. And a fabulous concept in general. Thank you! Keep up the fantastic work!

http.james

@dansup i’m interested in how you’ll integrate the Signal protocol into ActivityPub 🤔

DELETED

@dansup will it be federated with matrix at any point, or is that not really technically viable?

Phoenix 🔥 🐣🔥

@dansup Thanks Dan its good to have an alternative to whatsapp

Benno

@dansup So... @mwl should I write a client for this in Modula-3 and call it cvsup.?

LittleScrapsoftheNorth

@dansup ok the name is hilarious… I love it.

AtaKe

@dansup@mastodon.social
That sounds promising. Will keep an eye on it

Efi (nap pet) 🦊💤

@dansup wait, but there's an email client named sup... oh no...

Simon Zerafa :donor: :verified:

@dansup

I'll just leave this here for @jerry to find 🙂🤷‍♂️

Harry

@dansup Out of curiosity, would this impacted by the UK’s *potential* stupid Online Safety Bill? Which Apple and Signal said they’d shut down ops in the UK if imposed? 😬

Yoav Lavi

@dansup Encrypted as in end to end? What sort of knowledge does the server have about conversations (metadata, people etc.)? What's the planned privacy policy?

Im general sounds very cool!

Sylvain MAILLER

@dansup

It looks like precisely the decentralised, ciphered, phone-number-free alternative to WhatsApp etc, I'm looking forward to it !

@dodosan

eri :vlpn_smol:
@dansup how's the encryption handled? signal protocol?
Melanie (they, she)

@dansup alt text
Black background image, lower left quadrant had the word sup in white large letters, followed by an electric blue period. Beneath the word sup, in smaller letters, it reads by pixelfed. In the upper right quadrant, there are 4 rows of words, each row about one quarter the height of the lower left text. The first row says open source in white letters. The second says encrypted, in electric blue letters. The third says fediverse in white letters. The fourth says i m also in white letters.

OpenBSD

@dansup Is there website that shows it off or what it’s all about?

нездалисько :tryzub_white:

@dansup

It would be great if this messenger is then integrated into Mastodon, instead of the default private messages, which are unencrypted and in the format of regular posts, plain text...

Go Up