this post was submitted on 16 Sep 2021
18 points (90.9% liked)

Asklemmy

44631 readers
808 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy ๐Ÿ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago
MODERATORS
 

I think XMPP.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 4 points 3 years ago (8 children)

Using matrix as is out of the box is relatively secure but you need to be aware that a lot of metadata ends up on the servers of a UK based for-profit & venture capital funded company (New Vector).

Using 3rd party clients should really be encouraged.

[โ€“] [email protected] 5 points 3 years ago (7 children)

metadata is not encrypted as per matrix protocol, it's not the client's fault

[โ€“] [email protected] 3 points 3 years ago (6 children)

Would it even be possible to encrypt some basic metadata? I doubt that.

[โ€“] [email protected] 1 points 3 years ago (1 children)

xmpp encrypts everything, metadata included

it's not easy and makes the protocol really hard to implement but it is possible

[โ€“] [email protected] 3 points 3 years ago* (last edited 3 years ago) (1 children)

Hmm, sadly that isn't the case, a lot of metadata on XMPP is also exchanged only TLS transport encrypted and is thus available on the server in clear text. The main difference to Matrix is that it generates and exchanges much less metadata and most XMPP servers are configured to delete all the metadata after a relatively short period of time.

[โ€“] [email protected] 2 points 3 years ago

๐Ÿค” that does seem to be the case, maybe i was thinking of signal (it truly encrypts all metadata)

load more comments (4 replies)
load more comments (4 replies)
load more comments (4 replies)