Title.

I've used it before, but I'm not really sure how I feel about it. Would you use it on a day-to-day basis?

you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 2 years ago* (last edited 2 years ago)

https://getsession.org/session-protocol-technical-information

Nope. Whenever anybody ask them, they refer to this and close the ticket

I find their technical rationale, while welcome, a lot of hand waving to say they couldn't figure out how to implement it, but it was not important because it's not a big threat, because if somebody has the device they can get all the messages on the device anyway....

Losing perfect forward secrecy for "simpler code" is a strong design choice they made. I respect them for documenting this, I wish them the best of success, but that's not a trade-off I'm willing to make for no benefit

  • source
  • parent