I started looking into clients with end-to-end-encryption support. First one was , with its "charming" 90s messenger style. Encryption isn't the default here however, no progress on the corresponding issue. dev.gajim.org/gajim/gajim-plug


Next one was which looks better but expects knowledge of things like identifiers without providing any explanation when something is wrong (yes, version 0.1). Here as well, encryption isn't the default. At least the discussions are younger. github.com/dino/dino/issues/84

· · Web · 2 · 0 · 1

I did not bother installing /Psi+ any more. These messengers still try hard to imitate the ICQ client as well as contemporary IRC clients. Judging by discussions, encryption is not only not default, there are issues enabling it at all. Encrypting files is unsupported.

Show thread

Maybe and its forks are good clients. From what I've read there should be solid end-to-end encryption enabled by default. But it's only one client on one platform. And other clients have wildly inconsistent encryption support, same issue as with .

Show thread

@WPalant well at least, #matrix gets a good official client across 3+ platforms. Encryption should be enabled by default by now ? (That's a supposition, it's been a while since I last followed dev news, but it sure was a hot topic some months ago)

@WPalant too bad, #Riot uses a bit too much battery on phones I tested it on -- granted they were #fdroid flavour. I still have it on my phone, mainly to connect to #Freenode
(irony aside), but with every bit of autosync disabled when the app is not in the foreground.
I prefer the usage and look'n'feel of Conversations for family chatting
/end of story'o'me'life

@jiefk Yes, so far Riot still shows most potential despite the shortcomings. And I'm explicitly not saying "Matrix" because as of now there is no real selection of usable and secure clients.

Will continue looking but I have little hope to still find a good Signal replacement.

@WPalant what do you mean with "XMPP identifier"? Do you mean the Jabber ID what looks like an email address?

@jr Yes, that for example. When registering I had to enter a user name and select a server, yet it expected me to compose a Jabber ID myself when logging in. And it genuinely confused me when I tried to join a channel, I didn't realize that channel IDs were composed in the same way.

@WPalant maybe open an issue for this? I totally understand how this could be confusing for first time XMPP users

@jr It's not really an isolated incident. It's a general symptom of a UI which wasn't designed with less knowledgeable users in mind. And opening issues only gets you so far...

@jr Mind you, I'm not blaming the devs. I've been there myself, I know exactly how this happens. Doesn't mean that I have a simple answer. There is a reason why mature projects don't let developers design user interfaces.

@WPalant @jr i used to give things to my aged Father to try... he always came back with things devs (and QA) didn't even consider 🙄

Sign in to participate in the conversation
Infosec Exchange

A Mastodon instance for info/cyber security-minded people.