@uhuru
#DeltaChat has no forward secrecy.
And depended on SHA-1 and using MD5.
Both are considered weak cryptography if I'm not mistaken.
While I believe deltachat to be a great app with good use case, it's not what I'm looking for.

#xmpp ecosystem is?/was! pretty bad in serving proper e2ee cross platform implementation.
Till recently there was only conversations as a usable app. Since some weeks ago it seems that @dino now also offers e2ee by default. But also both conversations and Dino using an outdated omemo specification, and are by that not compatible with @kaidan.
I will reconsider xmpp when they adapt the newer specification.

@briar not mentioned, but also no, cause it's not working on #TailsOS or on android with Orbot.
So very much unusable, since it's not running on the platforms we use.

#simplex, no, I don't like nor trust the dev.

#cwtch, yes, maybe

@kuketzblog
Fast niemand verifiziert die Fingerprints. Signal kann einfach MiTM machen bei initialem Kontakt.
Sie hätten ja auch den Fingerprint im den Nutzernamen /QR Code packen können, wie #SimpleX - haben sie aber nicht.

Some of you may have heart of #simplex which likes to elevate itself as "the first messenger without user-ids" ... a goal, similar to ours, of not letting the transport layer know about who talks. Only we are doing it in the email system, fully interoperable with tens of thousands of existing email servers and other #openpgp endpoints. The email system is much more than SMTP/IMAP or even openpgp btw ... there is plenty of room for radical shifts and new takes. We are just starting :)

Ecco la registrazione della riunione didattica con il NaLUG sulle chat libere, decentralizzate e private del 5 aprile.

Peertube: https://videos.gianmarco.gg/w/vFhxYn2T4JZ3npHXuSD4vv
Odysee: https://odysee.com/@gianmarcogg03:e/riunionechat:e
YouTube: https://youtu.be/BLL_pFtEju4

@ip6li @heiseonline @briar #Signal zeigt doch Haltung, und würde das böse Spiel nicht mitspielen. Kann man also auch empfehlen. Besser als diverse Tech Konzerne, die Trump & Co nachlaufen. #unplugtrump #unplugtrump03 #messenger #threema #simplex

I got nothing for Signal. I used my brother's phone number but the 6 digit verification number just doesn't come.. He doesn't even know what Signal app is, so I doubt he used his phone number to sign up.

Guess this isn't the day to meddle with Signal. "No Signal" I guess :(

I'mma stick with SimpleX chat. This and the email. I dunno about Matrix+Element though

@scy They're all pretty bad. Threema has some major issues with their encryption protocol: https://infosec.exchange/@Fiona@blahaj.zone/114083506772906117

Delta Chat outright lacks forward secrecy, and also doesn't use post-quantum cryptography.

XMPP and IRC are a mess, and essentially unusable for less technical users.
When considering or recommending a messenger, always ask yourself: Would your grandma be able to use it? If she encountered some issue, would she be able to find someone, other than you, who could fix it? That unfortunately rules out a bunch of messengers.

I think best option is to use the @mollyim client for Signal. The second best choice would be @simplex

@Tutanota Currently we are using #session and exploring #simplex
Thank you tutanota!!

@feralthoughts @sarahjamielewis @dazo @ambiguous_yelp @light

> you say that #Tor relays should be required to sign agreements “prohibiting data collection and sharing”. Does this apply to #SimpleX relays?

Yes. It's in Privacy policy.

> 1-4.

Those that are preset operators (SimpleX Chat and Flux) - yes. We don't have a mechanism for the conditions for custom operators - it's coming.

@simplex

Will #SimpleX be providing a warrant canary? Or any other form of disclosure about legal demands for data on its users?

Will such disclosures also cover demands received by your relay providers? Do your relay providers have a legal obligation to provide SimpleX with this information?

@sarahjamielewis @dazo @ambiguous_yelp @light