In the Everlasting search for clients and servers Federated, detached from corporate underlords, connected to the masses I learned about the following client server duo

Client: Delta Chat
Servers: Chat Mail servers

One thing that jumps immediately into attention, is the fact that when you download the client, select a server, you get a QR code

When you've configured your client, you will immediately notice that you do not need to enter a password for your client. The system is passwordless by default.

You do not need to enter a multi-factor authentication code it doesn't need it.

What you need to do is be careful with, is who you share your link with. Go and play with it, see if it something for you

https://delta.chat/en/

#Federated #FediVerse #OpenSource #POSIX #Chat #Mail #Secure #encryption #programming #underlords #DeltaChat #email

@Dendrobatus_Azureus The image shows a smartphone screen displaying the settings menu of an application named "Radio Azureus." The screen is predominantly black with white text and icons. At the top, there is a status bar showing the time as 02:30, a Wi-Fi signal, full battery at 82%, and a temperature of 24 degrees. Below the status bar, the word "Settings" is displayed in white text, with a left-pointing arrow icon.

The settings menu includes several options: "Chats and Media" with "Read Receipts On," "Notifications" turned on, "Appearance" set to "System default, Wallpaper Default," "Add Second Device," "Connectivity" with "Connected," and "Advanced." At the bottom of the screen, there are two additional options: "Donate" with a heart icon and "Help" with a question mark icon, indicating the version of the application as "Delta Chat 1.58.4." The profile picture next to the name "Radio Azureus" shows a scenic image of a blue sky and water.

The image shows a screenshot of a mobile device displaying the Delta Chat website. The top section of the screen features a dark gray bar with the text "Home Download Blog Contribute FAQ Forum" and a logo with a speech bubble containing the letter "D." The time is 02:43, and the battery is at 91%.

Below the bar, the main content area is black with white and blue text. It states, "Delta Chat is a decentralized and secure messenger app." The features listed include reliable instant messaging with multi-profile and multi-device support, the option to sign up for secure fast chatmail servers or use classic e-mail servers, interactive web apps in chats for gaming and collaboration, and audited end-to-end encryption safe against network and server attacks. The text also mentions that Delta Chat is FOSS software built on Internet Standards, avoiding xkcd927.

At the bottom of the screen, there is a search bar with the URL "delta.chat/en" and a number "28" in a square, indicating notifications. The navigation bar includes a home icon, a lock icon, and a menu icon.

The image displays a smartphone screen with a dark background. At the top, there is a status bar showing the time as 02:42, a battery level of 91%, and a 4G signal. Below the status bar, there is a text section that provides information about Chatmail servers. The text explains that Chatmail servers offer a privacy-preserving and speedy messaging experience, interoperable with chatmail and classic email servers. It instructs users to tap a chatmail server link to see the home page and then tap the QR invite code.

The text lists several Chatmail server links, each with a brief description:

  • "nine.testrun.org" is the default onboarding chatmail server for Delta Chat apps and has been stable since the December 2023 Chatmail announcement.
  • "mehl.cloud" is geared towards German-speaking users.
  • "mailchat.pl" is geared towards Polish-speaking users.
  • "chatmail.woodpeckersnest.space" and "chatmail.culturander.it" are focused on Italian-speaking users.
  • "chika.aangat.lahat.computer" operates in the US.
  • "tarpit.fun" is hosted in Germany.

At the bottom of the screen, there is a navigation bar with a home icon, a search bar displaying "delta.chat/en/chat," and a number "28" indicating unread notifications. The navigation bar also includes options for "webxdc apps," "bots," and "cosmos."

Provided by @altbot, generated privately and locally using Ovis2-8B

🌱 Energy used: 2.305 Wh

@Dendrobatus_Azureus

Please also use deltachat and email hashtags. BTW, did you learn about webxdc? :) It'll hype your mind for a long time.

Would you like to join our tiny FLOSS DC group?

@Dendrobatus_Azureus ER, my infosec hacking upbringing tells me that nothing could go wrong with this setup..
At all..

🤦‍♂️

Best practices are for a reason

#OWASP

@Irishmasms

Finally someone who gave a good reaction thank you

#Infosec

@Dendrobatus_Azureus I've been doing this shit for way too long
@Irishmasms @Dendrobatus_Azureus would you mind saying explicitly what you think could go wrong with this setup?
@delta @Dendrobatus_Azureus it is wrong from the start, there is no trust nor verification
@Irishmasms @Dendrobatus_Azureus verification takes place between cryptographic identities. https://securejoin.readthedocs.io/en/latest/
SecureJoin: Protecting chat messaging against network adversaries — SecureJoin 0.20.0 documentation

@delta @Irishmasms

Thank you for the clarification of the verification process and the link to the documentation explaining the process.

https://securejoin.readthedocs.io/en/latest/

#Federated #FediVerse #OpenSource #POSIX #Chat #Mail #Secure #encryption #programming #underlords #DeltaChat #email

@altbot ping me

@Dendrobatus_Azureus The image displays a screenshot of a document or article on a mobile device, with a dark background and white text. The top section of the image shows a status bar with the time "06:51," a battery level of "72%," and various icons, including a notification icon. The main content is a text discussing the SecureJoin protocols, which enable peer devices to establish guaranteed end-to-end encryption resistant to machine-in-the-middle attacks. It mentions passive adversaries like message transport providers and the need for additional measures to relax security requirements for out-of-band channels under observation threats.

The text is divided into sections, with the first section titled "1.2. Disadvantages of other key-verification techniques." It explains that key verification is crucial for end-to-end encryption and describes the fingerprint verification workflows used in existing e2e-encrypting messengers like Signal or Element. It highlights issues with these schemes, such as the requirement for both peers to start the verification workflow to ensure keys are not manipulated, which impacts usability. The text also notes that in a group setting, every peer needs to verify keys. The bottom of the image shows navigation icons, including a back arrow, a circle, and a square, with a "latest" label and a dropdown menu.

Provided by @altbot, generated privately and locally using Ovis2-8B

🌱 Energy used: 0.296 Wh

@delta @Dendrobatus_Azureus so? How do you verify the individual behind that identity is who they say they are, and has not been compromised?