all 5 comments

sorted by: hot top controversial new old
[–] 18 points 9 months ago* (last edited 8 months ago) (1 child)

Honestly, federated FOSS makes so much sense for government communication, as it insulates them from reliance on corporate entities.

I just wish Matrix’s E2EE worked better. Even if you have all your keys managed properly, it’s still really unreliable.

  • source
  • hideshow 1 child comment
  • [–] 2 points 9 months ago* (last edited 8 months ago)

    I just wish Matrix’s E2EE worked better.

    For "real-time communication" for individuals who don't want to maintain their own communication infrastructure, the information around https://www.privacyguides.org/en/real-time-communication/ is surely at least somewhat useful. The recommendations might not be suitable for "government communication" or for people who are capable of setting up and maintaining a lot of infrastructure since I wouldn't describe the infrastructure required as being easy to host independently: it doesn't seem to be easy to set up 3 servers and make it possible to use them to communicate even if something bad happens to the communication network maintained by the original creators of the software. However, the Matrix protocol might be unsuitable for this too, since it is considered to be "social networking software" now, and it stopped being a recommendation for encrypted real-time communication: https://www.privacyguides.org/en/social-networks/#element

  • source
  • parent
  • [–] 1 point 9 months ago

    hope this leads to money going towards Element open source development. it works but it's not great right now

  • source
  • [–] 1 point 9 months ago (1 child)

    It's worrying to see that it's Matrix that's gaining ground in IT, when IT people more than anyone else should know that XMPP is the better alternative, Matrix is a bloated nu-protocol in comparison.

  • source
  • hideshow 1 child comment
  • [–] 1 point 8 months ago

    XMPP is not better than Matrix. My major gripes with it are OMEMO and the clients that implement different subsets of the extensions.

    OMEMO still is an extension instead of the core. It should be extremely easy to upgrade a chat to an encrypted one but if the client doesn't have a plugin installed to support it, you're stuck with unencrypted traffic.

    And the clients I've tested have all been visually unappealing and lacking in features. Reacting to messages, quoting messages, using threads, encryption, and finding rooms has been difficult or impossible with them.

    Matrix has a major advantage over XMPP in that it has an official, reference client which implements just about everything. It works better than most any XMPP client I've tried and, this is my feeling, every MSC accepted by the foundation has actually been implemented, instead of just being suggested and"left as an exercise to the developer".

    Matrix didn't come out of nowhere and didn't supplant XMPP for no reason. XMPP simply doesn't have the ecosystem that makes it attractive to users and debs alike.

  • source
  • parent
  • 6 comments in c/privacy@lemmy.ml view that post
    [–] 7 points 9 months ago (5 children)

    Absolutely everybody here is sleeping on zulip.

  • source
  • hideshow 5 child comments
  • [–] 15 points 9 months ago* (2 children)

    Zulip fulfills a completely different purpose than matrix. Its also not e2ee or federated so its kind of not an option at all for government use. Local governments need to be able to run independent infrastructure that can talk to each other. Centralized infrastructure is not an option anymore these days, its a national security risk.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 8 months ago (1 child)

    Local governments need to be able to run independent infrastructure that can talk to each other. Centralized infrastructure is not an option anymore these days

    Zulip can be self-hosted.

  • source
  • parent
  • hideshow 1 child comment
  • Yes but if it doesnt federate then that makes it more likely to become practically centralized. Interchanging information between independent organizations through a common channel is whats necessary here. Imagine if email only worked between people in the same company. Ridiculous concept.

    Interoperability would be even better, but if even people using the exact same software just on a different server cant exchange information then thats just not a feasible solution for big organizations or governments these days.

  • source
  • parent
  • [–] 4 points 9 months ago (1 child)

    Zulip is a PITA to set up, by reading the docs

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 9 months ago*

    It depends on your level of expertise. It's open source software that you download and run on hardware that you lease or own. So you need to know how to do that in order to use it. As those things go, it really isn't difficult.

    No, it's not as easy as signing up for an account on some website. That's the difference between third-party services (owned, operated and controlled by some random company your decide to trust) and software that YOU run, on hardware YOU control, with access that YOU decide upon, and no one who will gate it or take it away.

    It's a trade-off. Everyone must consider their wants vs needs and choose what's most important to them.

    What disappoints me is how quickly people are willing to throw up their hands and say IT'S TOO HARD without ever even trying.

  • source
  • parent
  • 4 comments in c/BoycottUnitedStates@europe.pub view that post
    [–] 3 points 9 months ago* (3 children)

    This was about self-hosted instances, for the most part.

  • source
  • hideshow 3 child comments
  • [–] [S] 2 points 9 months ago (2 children)

    Cloudflare is not a host. It’s a reverse proxy and governments use it.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 8 months ago* (last edited 8 months ago) (1 child)

    Ah, strictly internal, I read the post text wrong.

    If you require something that couldn't be used over CloudFlare, that cedes a whole lot of power to what they choose to support, though. It's kind of a weird bar to place; any networking could, in theory, be run by proxy.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 1 point 8 months ago* (last edited 8 months ago)

    If you require something that couldn’t be used over CloudFlare, that cedes a whole lot of power to what they choose to support

    Power is excessively unreasonably ceded when Cloudflare is in the loop. To avoid CF is to put power back where it belongs. Cloudflare-incompatible tech ensures CF does not wield inappropriate power.

    any networking could, in theory, be run by proxy.

    Indeed, and this frustrates sigsec. Connecting to someone requires trusting them not to do something stupid like hand their keys to a giant centralised corporate overlord. At least avoiding Cloudflare is low-hanging fruit. It’s usually easy to detect when CF is in the loop, apart from a few rare shenanigans where CF uses some IPs that are not in CF’s ASN records.

  • source
  • parent
  • 4 comments in c/ETS@europe.pub view that post
    [–] 5 points 9 months ago (1 child)

    Why do you need Cloudflare for Matrix?

  • source
  • hideshow 1 child comment
  • [–] [S] 3 points 9 months ago* (last edited 9 months ago)

    You don’t. But you don’t get to make that decision for everyone you talk to. People /erroneously/ think they do, so it has become impossible to participate in a public discussion without Cloudflare in the loop.

    FOSDEM 2026 demonstrates this embarrassment. Every single FOSDEM talk this year has a link to matrix.to (Cloudflare). Even if your own account is CF-independent, the rest of the crowd who you correspond with is not. You cannot isolate yourself from Cloudflare and also participate in FOSDEM rooms. That’s not ETS.

  • source
  • parent
  • [–] 1 point 9 months ago (1 child)

    i don't see the connection here. it's not about Matrix.

  • source
  • hideshow 1 child comment
  • 2 comments in c/hackernews@lemmy.bestiver.se view that post
    [–] -1 points 9 months ago* (last edited 9 months ago) (1 child)

    yikes! Not smart for “chasing digital sovereignty”.

    SimpleX is Cloudflare-free. Matrix is not.

  • source
  • hideshow 1 child comment
  • 1 comment in c/technology@lemmy.zip view that post
    [–] 19 points 9 months ago

    Good, as it should for normal people as well

  • source