Föderation EN Sa 01.03.2025 14:18:18 "Trying to get rid of US services" also means looking for alternatives for #Signal. (I don't intend to dump it outright, but with Signal being my main messenger for the past years, I think I should at least _consider_ other options.) Of these(!) options listed(!) in the poll, which one(s) would you recommend? Please don't suggest others. 64% Threema 107 Stimmen, bis Di 04.03.2025 14:19:17 |
Föderation EN Sa 01.03.2025 14:29:07 @scy Threema is the only of these with a even slightly worthwhile E2E-Encryption, so I think it's that or bust. |
Föderation EN Sa 01.03.2025 14:34:23 @dequbed https://www.messenger-matrix.de/ would disagree. Or do you have some strong arguments against OMEMO? And Delta Chat is using OpenPGP, which would also qualify as "worthwhile E2E encryption" in my book. |
Föderation EN Sa 01.03.2025 14:40:48 @scy that matrix is wrong. OMEMO does not implement PFS, and Conversations implements a very old variant of OMEMO that is still using SHA-1 and not even close as secure as Threema |
Föderation EN Sa 01.03.2025 14:47:18 @dequbed Guess I have some reading up to do. Thanks! ;) If you have any relevant links to throw at me, I'd appreciate it, but I think I'll also find my way around. Maybe @joinjabber is interested in chiming in? |
Föderation EN Sa 01.03.2025 15:41:28 @scy I don't think I have any specific links to throw your way, even the OMEMO document doesn't claim PFS anymore. Also, OpenPGP doesn't even attempt PFS, and for that and some additional reasons I'd rank it as even worse E2EE than OMEMO is. But then again, that ranking depends on what you threat model is. |
Föderation EN Sa 01.03.2025 18:30:31 @scy @dequbed @joinjabber @sten @mxey - a 2024 deep analysis of #deltachat 's guaranteed end-to-end encryption mode from Applied Crypto Group at ETH Zuerich https://eprint.iacr.org/2024/918 - a 2024 security audit of @rpgp , the Rust-implemented #OpenPGP engine https://github.com/rpgp/docs/blob/main/audits/NGI%20Core%20rPGP%20penetration%20test%20report%202024%201.0.pdf - FAQ entry on PFS https://delta.chat/en/help#pfs - Six security audits overall https://chaos.social/@delta/113963707915543266 |
Föderation EN Sa 01.03.2025 20:40:07 @delta “six security audits overall” but the one you link to says “Yet, the security of its protocols has not been studied to date.”. Claiming you had 6 security audits in total, when 5 of them apparently didn’t look at your protocol, in a conversation about the security of the protocol, is misleading at best. |
Föderation EN Sa 01.03.2025 20:43:16 @mxey good question. Research studies are actually a different thing than security audits. So more precisely we would need to say "five security audits and one research study" and the research study is referring to the relative lack of research studies, not security audits (we don't know of any messenger that has more published security audits than ours btw). |
Föderation EN Sa 01.03.2025 15:36:14 @scy i wouldn’t categorize OpenPGP as worthwhile crypto https://www.latacora.com/blog/2019/07/16/the-pgp-problem/ It’s nowhere close to what Signal does |
Föderation EN Sa 01.03.2025 16:47:53 @mxey @scy I was about to write just about the same. I'm sure that PGP (any variety) *can* be used securely, but it's just too damn hard. The "packet" format is so useless that you could have sign-then-encrypt or encrypt-then-sign and never know which. When last I looked (which is admittedly some time ago), PGP still supported many many now dangerously obsolete algorithms. I understand why they do that, but it's certainly not an endorsement to use it as the crypto layer for a new messenger. |
Föderation EN Sa 01.03.2025 17:16:47 |
Föderation EN Sa 01.03.2025 17:44:05 |
Föderation EN Sa 01.03.2025 14:30:43 @scy Unfortunately, none of them is really a viable alternative and that's something that worries me. |
Föderation EN Sa 01.03.2025 14:57:20 |
Föderation EN Sa 01.03.2025 14:57:33 @scy I’ve been using delta as a secondary messenger next to Signal. They are quite transparent about where they do better/worse than Signal itself. The ability to create multiple profiles (ie accounts) and use them in parallel is great, and being able to choose a server (or self-host if one prefers) is also great. |
Föderation EN Sa 01.03.2025 15:15:05 @scy They're all pretty bad. Threema has some major issues with their encryption protocol: https://infosec.exchange/@Fiona@blahaj.zone/114083506772906117 Delta Chat outright lacks forward secrecy, and also doesn't use post-quantum cryptography. XMPP and IRC are a mess, and essentially unusable for less technical users. I think best option is to use the @mollyim client for Signal. The second best choice would be @simplex |
Föderation EN Sa 01.03.2025 16:01:11 @Andromxda we need to get away from anything centralised, especially if controlled by only one entity. that means signal too. |
Föderation EN Sa 01.03.2025 16:08:16 @zeh I agree that SimpleX is better from a purely technical standpoint, but it has very few users and still isn't as easy to use and straightforward as Signal. There's nothing fundamentally wrong with Signal, and they're constantly improving (e.g. adding PQ crypto, usernames, etc.) There are some inherent flaws with federation/other forms of decentralization, Signal itself even has experience with that. TextSecure (the predecessor to Signal) used to federate with servers run by CyanogenMod, and it was a huge mess. As good as it may sound, federation is not always the answer, and often (unfortunately) just doesn't work well enough for a messaging service that people can rely on. |
Föderation EN Sa 01.03.2025 16:22:59 @Andromxda simplex seems to have cracked the federation problem by using dumb relays. works well and can grow in adoption. |
Föderation EN Sa 01.03.2025 16:27:48 The article says:
That can easily be mitigated by using a VPN or Tor. Even using a shared IP address via CGNAT (very common on cellular networks) would mitigate this. |
Föderation EN Sa 01.03.2025 16:42:12 @Andromxda |
Föderation EN Sa 01.03.2025 16:53:34
Those who need it. I also figured that one could use a Signal TLS proxy as a privacy mechanism. It's usually used for censorship circumvention in countries like China, Russia or Iran, but it also works just fine for increasing privacy. |
Föderation EN Sa 01.03.2025 16:59:01 @Andromxda |
Föderation EN Sa 01.03.2025 17:02:52 Cwtch and Briar just use Tor, I'm not sure about about SimpleX. I can name another messenger with a similar approach: Session uses Lokinet, but it has some stupid integration of crypto currency, and massively reduces the security of the Signal protocol by removing forward secrecy. Soatok even wrote an article about it: https://soatok.blog/2025/01/14/dont-use-session-signal-fork/ |
Föderation EN Sa 01.03.2025 17:04:33 @Andromxda so you agree, and that was not correct. many systems address net privacy and metadata protection, not just leave it for the user to contend with. |
Föderation EN Sa 01.03.2025 17:07:48 @zeh No, what I'm saying is that neither Briar, Cwtch nor Session actually solved the issue, they just mitigated it by using some form of a mixnet. You can do the same on Signal, but it will make the UX a lot worse. There's a reason why not everybody is using Tails OS or the Tor Browser. Sure, it solves the network privacy issue, but the UX sucks. |
Föderation EN Sa 01.03.2025 17:12:11 @Andromxda they addressed the issue by using tor underneath. the users won't have to do it by themselves, contrary to your claim. in any case, my argument was about centralisation and the very serious problems it brings in. |
Föderation EN Sa 01.03.2025 17:51:22
This is not true. I never disputed that Briar, Cwtch and Session route the traffic through mixnets by default.
Not a unique advantage of SimpleX, you can also route Signal through Tor just fine. The exact same article you linked to also notes that:
Signal provides top-notch cryptography, great usability, as well as a large userbase. Network-level privacy is each user's own responsibility. Imagine if every single app on your phone that makes network connections had its own VPN/mixnet client. The UX and battery life would be horrendously bad. This is exactly why all modern operating systems offer an API that makes it easily to globally connect to a VPN. Some VPN clients even allow you to only route specific apps through the tunnel, if that is what you desire. Commercial VPN services are becoming more and more popular, and almost every user has at least heard of them. Most people just don't use one, because they simply don't need it. The situation is very different in countries with heavy internet censorship like China, Russia, Iran, Saudi Arabia, etc. |
Föderation EN Sa 01.03.2025 18:14:04 @Andromxda you are trying to minimize the importance of centralisation and metadata protection. i think it should be clear that everyone needs it, especially in these times of rising fascism, and that it should be part of secure messaging systems. you don't. ok. |
Föderation EN Sa 01.03.2025 15:46:31 |
Föderation EN Sa 01.03.2025 16:27:06 @janvlug I don't know how to spell it out even more than in the original post. Blocked. |