Better than Signal?

Javcek

Hi. Have any of you used Session, Status and SimpleX messengers? They supposedly offer even better security and privacy because you don't have to give out your phone number. Do you have any experience of this?

GrapheneLover

SimpleX seems ok, if you use a VPN or Tor and have a disposable phone number or anonymous number then Signal is also ok. XMPP with OMEMO is ok as well.

Javcek

To use SimpleX do I need a VPN or Tor?

Icecube

GrapheneLover

Yes, you can host your own server with xmpp.
Conversations it's great, but i would like to choose my own algorithm rather Omemo.
Libre Threema is an option because don't enforce you to register a mobile number.
Matrix is an alternative too, justo avoid whatsapp and telegram.

Interesting topic.

GrapheneLover

Javcek You don't have too, however it is recommended to use a VPN plus Tor if you're able.

GrapheneLover

Icecube Yes, have been hosting my own XMPP server for more than 10 years now. XMPP is the way to go and would be a great choice if more people were willing to use it. Used OTR for many years then decided to go with OMEMO lately, it's a good option and has been tested by a lot of researchers.

Javcek

Icecube Threema is paid? How to use Matrix?

Icecube

Javcek

Threema you need to buy a license, but you don't need a mobile number.

Matrix clients

Tuba

Javcek I use session, been great so far, my friends don't complain and neither do i. Nice looking, rare bugs, secure.

Javcek

I think I'll check out Matrix. Does it use google push for messaging or does it have its own implementation?

Javcek

Tuba I also used Session but my wife on IOS had a problem sending photos. We gave up on it.

[deleted]

Javcek Matrix is "an open network for secure, decentralized communication", not an app. Every Matrix-compatible app can use any notification system, including Firebase Cloud Messaging (FCM) by Google or Its own.

[deleted]

Threema's developers downplayed 7 vulnurebilities found by the Swiss Federal Institute of Technology Zürich: https://www.kaspersky.co.in/blog/7-threema-vulnerabilities/25074/

wuseman

GrapheneLover
The problem is that XMPP isn't really user friendly at all at a level where normies would ever consider using it. Conversations doesn't have a desktop app, for example.

Icecube

wuseman Conversations doesn't have a desktop app, for example.

You can use dino instead.

Javcek

[deleted] So whichever application I choose, each will communicate with the other?

lambd

You can check Olvid.

Icecube

[deleted]

There are not vulnerabilities, there are features suited for governments.
All apps has vulnerabilities, In terms of security nothing is perfect, It is more interesting for an attacker to waste time looking for bugs in widely distributed applications than in a minority one.

wuseman

Icecube
The average user is never going to use Dino on their desktop and Conversations on their phone. Most other clients are the same on both.

Icecube

wuseman

Probably, don't forget grapheneOS in that list.