this post was submitted on 02 Mar 2021
154 points (97.5% liked)
Privacy
33499 readers
288 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Well there was Wire, which offered e2e encryption, an open protocol and opensource clients and backend, it has been audited, and it was based in Swiss which is times better than the US. I tried to move a lot of people there, but luckily I failed, considering it has been bought by an advertisement company recently
Wire was pretty good, true. I used it a bit, but chose Signal because Wire (similarly to Matrix, for now) doesn’t encrypt any/most metadata, whereas Signal encrypts everything and always has.
And like you said, it’s since been sold to an advertising company. Not sure if that’d even be possible with Signal since it’s owned by a non-profit (admittedly not always the case, I guess it could have been possible when they were still OWS).
In both cases, their centralised nature means changing ownership can be devastating (like in the case of Wire). This is why I believe Matrix is the future. Its community is much healthier and active in the development of the ecosystem (3rd party clients, bridges, they actually accept PRs, etc...)
This is not exactly true. Encrypting metadata is most times impossible due to the server needing to know who to deliver messages to (at the very least). "Sealed sender" is now a thing (though i don't know how strong a protection that is), but to my knowledge Signal continues to aggressively expose users' phone numbers both to the server (in a hashed formed, for contact discovery) and to other users in public chatrooms. Please correct me if wrong.
A non-profit doesn't mean you need to do good. Also, it can turn into a for-profit over the years. It's in fact a conscious strategy of startups in the field of "sharing economy" (remember couchsurfing?)
Matrix is one among others, but i'm not convinced a single solution is going to be the best:
They all have strong arguments going for/against them. I believe interoperability is the only way to go. These network are doing mostly the same thing, and there's no reason we can't talk across networks.
Which brings me to the fact matrix folks really don't seem to care about interoperability though i hope i'm wrong about this.
FluffyChat is a decent alternative client (with E2EE support). If you don't need e2ee there's actually a healthy number of clients, and some of them do seem to have it on their roadmap
https://matrix.org/clients/
Point taken on server implementations though
FluffyChat is not an option because it doesn't support proxies including Tor. If you're using fluffychat please open an issue there for integrated tor support like Conversations/Gajim does in the Jabber/XMPP world :)