Comments

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 8 months ago (7 children)

It's not a good discord alternative but simplex has been a solid secure chat option PQC working by default. It and mumble or jitsi serve my gaming needs.

https://simplex.chat/

XMPP would need one hell of an upgrade but it might be easier to refactor than the years of lazy bullshit in matrix's code. Time will tell. Flux could hackathon and venture captial into the lead

  • source
  • parent
  • hideshow 7 child comments
  • [–] 1 point 8 months ago (6 children)

    I haven't reviewed SimpleX, but it does some weird things (Curve448? Really??) that make me wonder about the author's capacity for threat modeling.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 8 months ago* (5 children)
  • [–] 1 point 8 months ago (4 children)
  • [–] 1 point 8 months ago (3 children)

    3 year old subpackage blob. Maybe it's from before the switch to PQC? They have a published threat model that helped guide the audits and seemed well reasoned. I'm not sure where that version of curve would be used in the current client or server.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 8 months ago (2 children)

    Either way, it's just... weird.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 8 months ago (1 child)

    you can message the developers directly from the client. Ask, if they dont know why it's there it'll get stripped out. I would guess it's legacy compatibility but it could be zombie code that needs pruned

  • source
  • parent
  • hideshow 1 child comment