- cross-posted to:
- privacy@lemmy.ml
- cross-posted to:
- privacy@lemmy.ml
You must log in or # to comment.
It does not even have PFS… Next!
It’s getting PFS in the coming months.
What’s PFS?
If an attacker decrypts one of your message, they can decrypt all your messages if you don’t have Perfect Forward Secrecy so it’s very important. With PFS, if the attacker decrypts one message, only this one will be decrypted
Thank you! Signal does have PFS, right?
Yes, the Signal protocol uses the Double Ratchet algorithm to provide PFS. Over all it is the best messenger app there is currently in terms of privacy -> https://soatok.blog/2024/07/31/what-does-it-mean-to-be-a-signal-competitor/
Even if Signal cannot access anything you share on it, it has major flaws for me:
- hosted in the USA on AWS, enemies of international laws
- is not decentralised
- a phone number must be linked to your account
By the way my nickname is Saejima, a friend of Onizuka and Danma lol 😂
Thx. What do you use instead of Signal then? Threema maybe?
Ah LOL didn’t notice the name. Nice one.
In case Signal doesn’t work or my contracts didn’t receive the message I use XMPP with OMEMO encryption (I have a simple Prosody server on my home server) and DeltaChat (everybody has an e-mail address)
DeltaChat is only to tell people "hey I sent you a message, answer! 🙂
When I have no WIFI or Internet access I still have Briar but I use it rarely
Wow that’s overkill. Thanks
we already have matrix chat, XMPP, IRC, how many more chat protocols do we need?
how many more chat protocols do we need?
All
Why is Session based in Switzerland?
While Session itself is a decentralised, global ecosystem, its steward is based in Switzerland. Switzerland was chosen as a home jurisdiction for its legal protections regarding personal privacy, world-class cybersecurity and computer science industry, and sophisticated regulation relating to decentralised technologies.
Switzerland’s long history of remaining politically neutral and constitutional right to privacy make it an excellent base for contributing to privacy software. Swiss companies are not allowed to share information with foreign law enforcement, and they cannot be compelled to engage in bulk surveillance.
These Swiss protections strongly reflect the core principles and mission of Session itself, making Switzerland a suitable jurisdiction for its steward, the Session Technology Foundation.
It sounds like they’re not aware of existing and planned surveillance, which has already led Proton to move out of Switzerland due to security and privacy concerns. tuta src
In 2016, Swiss Parliament updated its data retention law BÜPF to enforce data retention for all communication data (post, email, phone, text messages, ip addresses). In 2018, the revision of the VÜPF translated this into administrative obligations for ISPs, email providers, and others, with exceptions in regard to the size of the provider and whether they were classified as telecommunications service providers or communications services.
The proposed update to Switzerland’s Ordinance on the Surveillance of Postal and Telecommunications Traffic (VÜPF: Verordnung über die Überwachung des Post- und Fernmeldeverkehrs) represents a significant expansion of state surveillance powers, worse than the surveillance powers of the USA.
Legal and data protection experts also criticize that the update of the VÜPF conflicts with the Data Protection Act (e.g. the Act’s data minimization principle) and may violate constitutional rights such as the right to privacy.
What is more, the law is not introduced by or via the Parliament, but instead the Swiss government, the Federal Council and the Federal Department of Justice and Police (FDJP), want to massively expand internet surveillance by updating the VÜPF - without Parliament having a say. This comes as a shock in a country proud of its direct democracy with regular people’s decisions on all kinds of laws. However, in 2016 the Swiss actually voted for more surveillance, so direct democracy might not help here.
From Switzerland my ass
Wow, the first project to have found a use case for cryptocurrency!
Just kidding. This is trash. I don’t care about fancy privacy features if the backend is tied to the Ethereum scam machine. Use Signal or Matrix.
Matrix exists.
sadly it sucks
I just want to use DeltaChat with people
