▲ 141 ▼ Molly - a better signal (molly.im) submitted 2 years ago by possiblylinux127@lemmy.zip to c/privacy@lemmy.ml 128 comments fedilink hide all child comments
[–] mojo@lemm.ee -5 points 2 years ago* (1 child) of a popular XMPP client 10k downloads for a hideous outdated app is popular now? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago (1 child) FYI that's an app that's used by the German police and in several other "sensitive" contexts where users won't just pull it from the play store :) ISIS even had their own fork at a point. permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 1 point 2 years ago (1 child) Source? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 1 point 2 years ago (1 child) https://gultsch.social/@daniel/109828650796048124 permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 1 point 2 years ago (1 child) that website is broken beyond belief, I can't confirm anything talking about the police site, not the mastodon link permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) It really took me a second to figure out: https://www.bundespolizei.de/Web/DE/Service/Mediathek/Jahresberichte/jahresbericht_2020_file.pdf , click on the PDF link, hop to page 48. But even without that, do you really believe that the developer of the app, who's making a living of it, would commit financial suicide by lying so openly about such a trivial thing? Either way, with or without Conversations, XMPP is used by millions of users daily: https://www.rst.software/blog/22-companies-using-xmpp-and-ejabberd-to-build-instant-messaging-services https://xmpp.org/uses/instant-messaging/ permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 0 points 2 years ago (1 child) Huh interesting, I actually had no idea those big apps used XMPP. Would it be easy for them to add e2ee if they wanted to? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/ OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols. In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed. permalink fedilink source parent
[–] u_tamtam@programming.dev 2 points 2 years ago (1 child) FYI that's an app that's used by the German police and in several other "sensitive" contexts where users won't just pull it from the play store :) ISIS even had their own fork at a point. permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 1 point 2 years ago (1 child) Source? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 1 point 2 years ago (1 child) https://gultsch.social/@daniel/109828650796048124 permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 1 point 2 years ago (1 child) that website is broken beyond belief, I can't confirm anything talking about the police site, not the mastodon link permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) It really took me a second to figure out: https://www.bundespolizei.de/Web/DE/Service/Mediathek/Jahresberichte/jahresbericht_2020_file.pdf , click on the PDF link, hop to page 48. But even without that, do you really believe that the developer of the app, who's making a living of it, would commit financial suicide by lying so openly about such a trivial thing? Either way, with or without Conversations, XMPP is used by millions of users daily: https://www.rst.software/blog/22-companies-using-xmpp-and-ejabberd-to-build-instant-messaging-services https://xmpp.org/uses/instant-messaging/ permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 0 points 2 years ago (1 child) Huh interesting, I actually had no idea those big apps used XMPP. Would it be easy for them to add e2ee if they wanted to? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/ OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols. In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed. permalink fedilink source parent
[–] mojo@lemm.ee 1 point 2 years ago (1 child) Source? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 1 point 2 years ago (1 child) https://gultsch.social/@daniel/109828650796048124 permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 1 point 2 years ago (1 child) that website is broken beyond belief, I can't confirm anything talking about the police site, not the mastodon link permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) It really took me a second to figure out: https://www.bundespolizei.de/Web/DE/Service/Mediathek/Jahresberichte/jahresbericht_2020_file.pdf , click on the PDF link, hop to page 48. But even without that, do you really believe that the developer of the app, who's making a living of it, would commit financial suicide by lying so openly about such a trivial thing? Either way, with or without Conversations, XMPP is used by millions of users daily: https://www.rst.software/blog/22-companies-using-xmpp-and-ejabberd-to-build-instant-messaging-services https://xmpp.org/uses/instant-messaging/ permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 0 points 2 years ago (1 child) Huh interesting, I actually had no idea those big apps used XMPP. Would it be easy for them to add e2ee if they wanted to? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/ OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols. In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed. permalink fedilink source parent
[–] u_tamtam@programming.dev 1 point 2 years ago (1 child) https://gultsch.social/@daniel/109828650796048124 permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 1 point 2 years ago (1 child) that website is broken beyond belief, I can't confirm anything talking about the police site, not the mastodon link permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) It really took me a second to figure out: https://www.bundespolizei.de/Web/DE/Service/Mediathek/Jahresberichte/jahresbericht_2020_file.pdf , click on the PDF link, hop to page 48. But even without that, do you really believe that the developer of the app, who's making a living of it, would commit financial suicide by lying so openly about such a trivial thing? Either way, with or without Conversations, XMPP is used by millions of users daily: https://www.rst.software/blog/22-companies-using-xmpp-and-ejabberd-to-build-instant-messaging-services https://xmpp.org/uses/instant-messaging/ permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 0 points 2 years ago (1 child) Huh interesting, I actually had no idea those big apps used XMPP. Would it be easy for them to add e2ee if they wanted to? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/ OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols. In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed. permalink fedilink source parent
[–] mojo@lemm.ee 1 point 2 years ago (1 child) that website is broken beyond belief, I can't confirm anything talking about the police site, not the mastodon link permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) It really took me a second to figure out: https://www.bundespolizei.de/Web/DE/Service/Mediathek/Jahresberichte/jahresbericht_2020_file.pdf , click on the PDF link, hop to page 48. But even without that, do you really believe that the developer of the app, who's making a living of it, would commit financial suicide by lying so openly about such a trivial thing? Either way, with or without Conversations, XMPP is used by millions of users daily: https://www.rst.software/blog/22-companies-using-xmpp-and-ejabberd-to-build-instant-messaging-services https://xmpp.org/uses/instant-messaging/ permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 0 points 2 years ago (1 child) Huh interesting, I actually had no idea those big apps used XMPP. Would it be easy for them to add e2ee if they wanted to? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/ OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols. In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed. permalink fedilink source parent
[–] u_tamtam@programming.dev 2 points 2 years ago* (last edited 2 years ago) (1 child) It really took me a second to figure out: https://www.bundespolizei.de/Web/DE/Service/Mediathek/Jahresberichte/jahresbericht_2020_file.pdf , click on the PDF link, hop to page 48. But even without that, do you really believe that the developer of the app, who's making a living of it, would commit financial suicide by lying so openly about such a trivial thing? Either way, with or without Conversations, XMPP is used by millions of users daily: https://www.rst.software/blog/22-companies-using-xmpp-and-ejabberd-to-build-instant-messaging-services https://xmpp.org/uses/instant-messaging/ permalink fedilink source parent hideshow 2 child comments replies: [–] mojo@lemm.ee 0 points 2 years ago (1 child) Huh interesting, I actually had no idea those big apps used XMPP. Would it be easy for them to add e2ee if they wanted to? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/ OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols. In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed. permalink fedilink source parent
[–] mojo@lemm.ee 0 points 2 years ago (1 child) Huh interesting, I actually had no idea those big apps used XMPP. Would it be easy for them to add e2ee if they wanted to? permalink fedilink source parent hideshow 2 child comments replies: [–] u_tamtam@programming.dev 2 points 2 years ago It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/ OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols. In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed. permalink fedilink source parent
[–] u_tamtam@programming.dev 2 points 2 years ago It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/ OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols. In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed. permalink fedilink source parent