137

Best apps for private messaging (www.privacyguides.org)

submitted 2 months ago by Maragato@lemmy.world to c/opensource@lemmy.ml

92 comments fedilink hide all child comments

Hello. I am looking for an alternative to Telegram and I prefer an application that uses decentralised servers. My question is: why is the xmpp+omemo protocol not recommended on websites when it is open source and decentralised? The privacyguides.org website does not list xmpp+omemo as a recommended messaging service. Nor does this website include it in its comparison of private messaging services.

https://www.privacyguides.org/en/assets/img/cover/real-time-communication.webp

Why do you think xmpp and its messaging clients such as Conversations, Movim, Gajim, etc. do not appear in these guides?

you are viewing a single comment's thread
view the rest of the comments

[+] tastemyglaive@lemmy.ml -13 points 2 months ago

good to know leaking phone numbers and being the main Discord alternative used by congress and Jeff Bezos on a centralized server isn't a problem on .world

TOR nodes are mostly run by the US government and independent cryptocurrency entrepreneurs (Jeffrey Epstein email chain inhabitants)

if you had half a brain you would use i2p

[-] theherk@lemmy.world 5 points 2 months ago

Cool strawmen; I didn’t say any of that. Signal protocol is awesome for privacy, not anonymity. Maybe I don’t have half a brain, but I happen to think the double ratchet implementation is an impressive piece of tech. Maybe I’m as dumb as your fever dream, but compromised exits doesn’t make tor any less of an achievement. Though i2p is also superb. I guess my brain is too weak to understand why those statements are mutually exclusive.

[-] cypherpunks@lemmy.ml 4 points 2 months ago* (last edited 2 months ago)

Signal protocol is awesome for privacy, not anonymity

The "privacy, not anonymity" dichotomy is some weird meme that I've seen spreading in privacy discourse in the last few years. Why would you not care about metadata privacy if you care about privacy?

Signal is not awesome for metadata privacy, and metadata is the most valuable data for governments and corporations alike. Why do you think Facebook enabled e2ee after they bought WhatsApp? They bought it for the metadata, not the message content.

Signal pretends to mitigate the problem it created by using phone numbers and centralizing everyone's metadata on AWS, but if you think about it for just a moment (see linked comment) the cryptography they use for that doesn't actually negate its users' total reliance on the server being honest and following their stated policies.

Signal is a treasure-trove of metadata of activists and other privacy-seeking people, and the fact that they invented and advertise their "sealed-sender" nonsense to pretend to blind themselves to it is an indicator that this data is actually being exploited: Signal doth protest too much, so to speak.