@blake

1) Many people want end to end encryption by default and only. Signal has dropped SMS chats three years ago. Mixing cleartext and e2ee is problematic from a usable security pov

2) Several #chatmail operators in repressive situations/environments want to be sure their servers do not contain data that can hurt people. Strictly requiring end to end encryption helps.

3) We use IETF standardized protocols for interoperability and discuss with other MUA devs and help where we can.

@blake @delta
"this breaks the main reason anyone would choose DeltaChat over, say, XMPP+OMEMO."

I think if people use xmpp and delta chat for a while, the reason why they keep on using delta chat is not email compatibility. People should just try out.

(I still keep on using xmpp next to delta chat because I think it can be useful to have more than one open protocol)

@Avitus@ioc.exchange @delta@chaos.social In the United States, you're responsible and potentially liable for content that transmit over your services. That is how the government in the past were able to shut down sites and services that eventually were overrun with illegal content, for example. Additionally, in the United States, you can receive a court order, ordering you not to reveal the government's involvement with your products or services. Also, how previous people who have used such products or services, still faced justice.

Now, none of this should worry you if you're not breaking the law. However, laws change, and unfortunately, so does freedom of speech. We have a government regime who is picking people off the streets and sending them to jails in other countries. That same government regime is threatening our allies, such as Canada and Greenland.

What you're saying and doing, right now, may be perfectly legal, right now. I am more concerned with the possible unknown tomorrows.

@Avitus @Linux sure signal is so far the best central messenger when it comes to handling privacy on potentially hostile infrastructure. However any seized phone can reveal phone numbers of group members. Collecting IP addresses are another attack vector. Cloudflare which serves encrypted blob files may be able to identify IP addresses of all signal group members who download an encrypted file. It's not data that the signal organization itself has access to but certainly an attack vector.

@delta @ex_06 you might want to drop a note on that page about the whole "sign up for newsletters" thing not being possible anymore, since chatmail servers can now only receive encrypted messages. That obsolete capability is pretty loudly advertised in that post and I was pretty confused when I tried experimenting with sending real email to a chatmail address and it was rejected.