this post was submitted on 15 Jan 2024
17 points (100.0% liked)
technology
23218 readers
2 users here now
On the road to fully automated luxury gay space communism.
Spreading Linux propaganda since 2020
- Ways to run Microsoft/Adobe and more on Linux
- The Ultimate FOSS Guide For Android
- Great libre software on Windows
- Hey you, the lib still using Chrome. Read this post!
Rules:
- 1. Obviously abide by the sitewide code of conduct. Bigotry will be met with an immediate ban
- 2. This community is about technology. Offtopic is permitted as long as it is kept in the comment sections
- 3. Although this is not /c/libre, FOSS related posting is tolerated, and even welcome in the case of effort posts
- 4. We believe technology should be liberating. As such, avoid promoting proprietary and/or bourgeois technology
- 5. Explanatory posts to correct the potential mistakes a comrade made in a post of their own are allowed, as long as they remain respectful
- 6. No crypto (Bitcoin, NFT, etc.) speculation, unless it is purely informative and not too cringe
- 7. Absolutely no tech bro shit. If you have a good opinion of Silicon Valley billionaires please manifest yourself so we can ban you.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I think Signal has had some issues with fed related activity. Telegram is fine because it's based on Matrix, but the most secure will always be using your own instance where you have control of the data. The ones I mentioned aren't end to end encrypted, but hosting your own instance puts them in your control.
Matrix is just a backend framework for sending and receiving. I was actually wrong about Telegram being a Matrix client. I usually just don't use a lot of online messaging stuff though outside work so that's my bad. Got Telegram and Element confused.
Matrix is just the one I see more trust about in the community and getting an instance up and running is easy to do.
All three are open source (Matrix, Signal, and Telegram) so you can audit their security protocols or follow people on the issues pages that are identifying security vulnerabilities, but in the end using any service that you don't have control over is gonna make it difficult to remain truly secure.
If at any point an instance owner decides to share server data they can, which in most of these apps won't necessarily give them access to messages if the server never loads them as plaintext, but will give them access to information about who you're talking with and such.
If you aren't like actively organizing or doing anything that would require absolute security in messaging all of them would probably be fine as they're better than sending MMS or SMS, but at the end of the day you just need to be aware of who is controlling your data and who might want it.