The protocol doesn’t really matter when you send encrypted messages over it like Delta Chat. Signal is not private nor decentralized and SimpleX doesn’t have encrypted group chats last time I tried
You are confusing privacy with anonymity. You aren’t anonymous because your user is linked to a phone number, but your communications are private due to how their encryption works.
On the location attack: it is a matter of configuration and your location will be as ambiguous as thousands of miles.
Precise language is important if you want to understand and communicate truth. It helps a lot to understand the difference between privacy and anonimity there is a scenario where a person doesn’t care that an adversary knows their id, but does care about the content of their messages. In which case, differentiating tools that provide that particular service requires language to discuss it.
You are correct… Official narrative is that it helps reduce spam and bits which could be a reason… But phone numbers linked to real ID allows spooks to maintain their surveillance regime. They get the relationship maps, if they deem you a threat, they will use Israeli spyware to breach your device and get the content
Yup that’s why it seems great :) though i haven’t heard of forks. I think i’ll wait a little more till i switch to it, just to see if it gets itself in hot water. It’s too early to tell
I guess so. It’s encrypted data sent over email from what i understand. Tbf i’d rather trust software built with protocols specifically built for secure and private messaging, and email is known to not be that.
Doesn’t delta use email under the hood, an insecure protocol?
You’re better off using something like Matrix, XMPP, SimpleX or Signal.
The protocol doesn’t really matter when you send encrypted messages over it like Delta Chat. Signal is not private nor decentralized and SimpleX doesn’t have encrypted group chats last time I tried
Maybe. My comment was based off of what i understood from the website
Could you elaborate on this? haven’t heard of this point (is it due to the jurisdiction on a 5 eyes country?)
It actually does now. It’s a very solid choice i’d say :)
You need a phone number to sign up which requires identification in most countries.
Also anyone who knows your username can ping where you are at any time: https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117
You are confusing privacy with anonymity. You aren’t anonymous because your user is linked to a phone number, but your communications are private due to how their encryption works.
On the location attack: it is a matter of configuration and your location will be as ambiguous as thousands of miles.
Finessing the terms does not stop them demanding a phone number.
Precise language is important if you want to understand and communicate truth. It helps a lot to understand the difference between privacy and anonimity there is a scenario where a person doesn’t care that an adversary knows their id, but does care about the content of their messages. In which case, differentiating tools that provide that particular service requires language to discuss it.
Clearly, they do care about the phone number.
You are correct… Official narrative is that it helps reduce spam and bits which could be a reason… But phone numbers linked to real ID allows spooks to maintain their surveillance regime. They get the relationship maps, if they deem you a threat, they will use Israeli spyware to breach your device and get the content
They are right. Terminology is important in this discussion.
Interesting, thanks. I think SimpleX fixes a lot of signal’s issues, but the only problem i have that it is funded by VC and quite new.
Ah so they are just capturing users currently and will have to make return on investment later? That’s a no from me.
Yeah it’s a shame, though i’m going to wait before switching to it to see if it gets itself into any hot water.
They are open source and decentralized and indeed there are already a few forks.
Yup that’s why it seems great :) though i haven’t heard of forks. I think i’ll wait a little more till i switch to it, just to see if it gets itself in hot water. It’s too early to tell
Email? So its just encrypted SMS?
Might come down to the metadata, then, like SFTP vs FTPES or GET vs POST.
I guess so. It’s encrypted data sent over email from what i understand. Tbf i’d rather trust software built with protocols specifically built for secure and private messaging, and email is known to not be that.