workgooddoes lemmy have a chat and dms like reddit?
empireOfLove2Yes. Click on any person’s username and under/next their bio there is a button to send a direct message. Not really a live chat thing yet, lemmy does not have the backend for that.
Note, DM’s over Lemmy are NOT encrypted, only obfuscated, any federated server can read the DM’s you send. Keep that in mind when choosing content to talk about.
sirxdaemonWait, what? It’s just the sender and receiver’s instances that can read the message; it’s not just any server right?
I believe you’re right but don’t know enough about the real back end magic to confirm. I want to say I once read that the DM was always broadcast to all servers but that seems pointless.
What matters is that dm’s are not private and should not be considered private, both in transit (during sending) and at rest (copy sitting at each server)
What matters is that dm’s are not private and should not be considered private, both in transit (during sending) and at rest (copy sitting at each server)
Someone could point out where I am wrong but essentially it is the same as a standard email in that there is a plain text copy stored in both the send and receive instance. Maybe it is easier to think of as just another comment where instead of @domain.xyz has read access, just the specified [email protected] has read access. The server admins could still see them if they wanted to, just like Yahoo, Google, etc can in plain text (which is how SPAM filters often, as of the email was actually encrypted they wouldnt know the content inside it to try to filter it out.
More end to end options are coming to the fediverse, (Matrix has been around, I saw something last week another was coming) but really most people don’t ever encrypt data they send to others, and don’t care usually.
See: Epsteins emails being accessible not without decrypting anything. There were people who supposedly found his password in the released files, and just logged into outlook or whatever with it. End to end encryption should have required them to have s/mime the handshake performed on that specific device to see the emails, so it would have all been garbledegook.