this post was submitted on 31 Mar 2021
14 points (100.0% liked)

Privacy

33192 readers
573 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I recently made a post talking about how im using briar but wanted ppl to recommend other apps but this article talks about some problems of those apps https://serpentsec.1337.cx/secure-messaging-choosing-a-chat-app

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 3 years ago (9 children)

However, due to XMPP's inherent metadata leaks, XMPP should usually not be trusted for private communication. Does anyone have more information on this? I always assumed XMPP to be quite good for private conversations, considering it's strongly decentralized nature and maturity.

[–] [email protected] 2 points 3 years ago (2 children)

This is one of these "true, but" kind of things. Of course in a federated network servers need to communicate with each other and that "leaks" meta-data to them. Maybe XMPP could be optimized a bit more to share less metadata (but it already shares less then Matrix), but in the end there is no way to totally avoid that if you want to enable federation.

IMHO I think the privacy benefits outweigh the downsides, because in XMPP each server only has a limited subset of the metadata and thus is it much harder to do AI driven data-mining on it.

[–] [email protected] 1 points 3 years ago (1 children)

Thank you for the insights, do you know which data that is in particular? For federation I would think 1) who you're speaking to (both servers?), 2) on which server they are, 3) how long, how often, etc. Is that about right?

[–] [email protected] 2 points 3 years ago

Yes, and all of that lives inside TLS, so only the server admins on both ends would see it.

load more comments (6 replies)