alfredon996Jan 9

Session Chat, decentralized messaging app, from Switzerland 🇨🇭

https://feddit.it/post/25573430

Session Chat, decentralized messaging app, from Switzerland 🇨🇭 - Feddit.it

Lemmy

Show threadsaejimaJan 9

It does not even have PFS… Next!

See also: soatok.blog/2025/01/20/session-round-2/

Session Round 2 - Dhole Moments

Last week, I wrote a blog post succinctly titled, Don’t Use Session. Two interesting things have happened since I published that blog: A few people expressed uncertainty about what I wrote ab…

Dhole Moments
Show threadErenOnizukaJan 11
What’s PFS?
Show threadsaejimaJan 11
If an attacker decrypts one of your message, they can decrypt all your messages if you don’t have Perfect Forward Secrecy so it’s very important. With PFS, if the attacker decrypts one message, only this one will be decrypted
Show threadErenOnizuka

Thank you! Signal does have PFS, right?

signal.org/blog/asynchronous-security/

Forward Secrecy for Asynchronous Messages

Traditionally, asynchronous messaging systems such as email have relied on protocols like PGP or S/MIME for cryptographic security. These protocols work the way most people are familiar with: one who wishes to receive encrypted email advertises a public key, and those wishing to send encrypted e...

Signal Messenger
Jan 12 at 7:00pmWeb
Show threadsaejimaJan 13

Yes, the Signal protocol uses the Double Ratchet algorithm to provide PFS. Over all it is the best messenger app there is currently in terms of privacy -> soatok.blog/…/what-does-it-mean-to-be-a-signal-co…

Even if Signal cannot access anything you share on it, it has 2 major flaws for me:

  • hosted in the USA, enemy of international laws
  • hosted on Amazon Web Service

By the way my nickname is Saejima, a friend of Onizuka and Danma lol 😂

What Does It Mean To Be A Signal Competitor? - Dhole Moments

A lot of recent (and upcoming) blog posts I’ve written, and Fediverse discussions I’ve participated in, have been about the security of communication products. My criticism of these pro…

Dhole Moments
Show threadErenOnizukaJan 15

Thx. What do you use instead of Signal then? Threema maybe?

Ah LOL didn’t notice the name. Nice one.

Show threadsaejimaJan 16

In case Signal doesn’t work or my contracts didn’t receive the message I use XMPP with OMEMO encryption (I have a simple Prosody server on my home server) and DeltaChat (everybody has an e-mail address)

DeltaChat is only to tell people "hey I sent you a message, answer! 🙂

When I have no WIFI or Internet access I still have Briar but I use it rarely

Show threadErenOnizukaJan 17
Wow that’s overkill. Thanks