@kkarhan@infosec.space@samueljohn @ditol @linuzifer @Mer__edith @signalapp I disagree cuz in both cases they demand #PII for no legitimate reason AND they are still #centralized, #SingleVendor & #SingleProvider solutions where #Security is "#TrustMeBro!" level re: #Backend!
- Whereas with #XMPP+#OMEMO & #PGP/MIME one can not only #SelfHost and choose their clients of choice but they also respect #privacy and deliver proper security through proper #E2EE & #SelfCustody of all the keys...
Seriously, it's 2024 and there's no valid reason to not use like @monocles / #monoclesChat + @torproject / #Orbot & @tails_live / @tails / #Tails + @gajim / #Gajim for #secure & #anonymous #comms!
@kkarhan@samueljohn @ditol @linuzifer @Mer__edith @signalapp @monocles @torproject @tails_live @tails @gajim
Personally, I thing #Signal is #sus af - I just don't have evidence (as of writing!)...
https://freiburg.social/@ditol/113333993597525529
freiburg.socialDitol (@ditol@freiburg.social)@samueljohn@mastodon.world @kkarhan@infosec.space @linuzifer@23.social @Mer__edith@mastodon.world @signalapp@mastodon.world
You still need a valid phone number to sign up AFAIK. Which makes all the talks about privacy sensitivity untrustworthy from the very first engagement with the messenger app. And then there is Signal's opposition to forks clients, F-Droid and hosting your own signal server. This all just doesn't add up to all the nice things Meredith talks about in the podcast.