Comment on Federated End-to-End Encrypted Messaging is Coming Soon

• RIotingPacifist@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  That’s not really going to be the case if you’re using a website instead of an audited app like signal/matrix.

  source

  • blah3166@piefed.social ⁨2⁩ ⁨weeks⁩ ago

    that argument doesn’t hold. you’re letting perfect be the enemy of good-and if you truly believe that, then you wouldn’t be recommending Matrix which has web clients, see https://app.element.io/

    source

    • RIotingPacifist@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      Any we client including Matrix we webclient is incredibly vulnerable to the server just injecting JS and reading your messages.

      Like there is no point of E2E encryption in Twitter, Musk can read your messages if you open them on any device he can execute arbitrary code on.

      source

      • blah3166@piefed.social ⁨2⁩ ⁨weeks⁩ ago

        Any we client including Matrix webclient is incredibly vulnerable to the server just injecting JS

        That doesn’t preclude fediverse clients from enabling E2EE. A web-client isn’t a requirement.

        Like there is no point of E2E encryption in Twitter, Musk can read your messages if you open them on any device he can execute arbitrary code on.

        Agreed, nobody should trust twitter, but I would trust most mastodon clients to send encrypted messages, if/when implemented correctly. Does it guarantee that messages will never be read? No, but it does an extra layer that wasn’t there before.

        source