• [deleted]

i use and like Molly (for signal) and Threema

13 days later

AlanZ Threema doesnt have PFS and the messages don't delete on a timer, not my app of choice.
BTW I don't understand whats the whole problem with "Signal & phone number", if you are unable to obtain a nameless Sim card, install signal with it, put a PIN registration lock and dispose the sim that maybe you shouldn't use Signal at all.

    Dangor
    I am perfectly capable of doing this, I choose not to, because I resent it. Maybe the difference will dawn on you, give it time, seems like you need it.

      AlanZ
      Then just don't use signal.
      I don't like pepsi so I drink cola, I don't tell pepsi to change its ingredients and make bad marketing about them. Its a free market.
      P.s I don't drink either, keeping a healthy lifestyle :D

      .

        8 days later

        MaxPower they claim PFS is achieved because they use TLS (which is kind of true but far from ideal). Their message cryptosystem itself does not achieve perfect forward secrecy.

          a month later

          Icecube which client would you recommend on matrix

          GrapheneLover whoah, impressive. What else would you recommend in general for communication if there's any different usecases...

          Javcek Late to the game -- sorry. I have been using the Signal fork Molly.im with success here. Yes, it requires a phone number, because it hooks up to your Signal account. It does, though, offer some features over Signal: it will encrypt your local message archives, for one, and crucially will allow Android-Android linking, which Signal won't -- say you have Signal on a Pixel phone and you want to add your Pixel tablet. Signal doesn't support that, but Molly.im does.

          • N1b replied to this.

            depscribe thank you, somehow the Android-linking feature totally went over my head.

            zkz

            Correct me if I'm wrong, but if I understand correctly, the Ibex protocol implemented by Threema at the end of 2022 seems to have implemented PFS beyond TLS:

            "At the transport layer, Threema has always supported Perfect Forward Secrecy (PFS). And just like for group calls (see above), PFS has always been enforced at the end-to-end layer for individual calls. The new Ibex protocol now also supports the exchange of ephemeral keys for chat messages on the end-to-end layer (with ECDH). A new key is used for each message, from which it is not possible to derive previous keys (thanks to KDF ratcheting)."

            Here an external security analysis of the Ibex protocol.

            Braxman is a charlatan who spreads massive amounts of misinformation about privacy and security. He pretends to be an expert but doesn't know what he's talking about. He's also involved in the attacks on GrapheneOS including harassment. Promoting his content here isn't allowed.

              Ironic that he's the reason I use and donate to GOS. Sorry, didn't realize he's attacked GOS.

              5 days later

              admin I didn't know this. Do you have further reading/links so I can educate myself more about this, please?

                • [deleted]

                Jobloggs it makes sense now that I have never seen him once mention or recommend GrapheneOS in any of his videos. I would also like to see the background for his approach. He may be a scaremongerer among the normie population but some of his information is factually correct and if one looks at it critically there is a good takeaway from that. Also he was one of the people who brought me to use of GrapheneOS in the end.

                admin Wow, I don't know that :( I detest people like that. Who burns people just for profit or ego...

                You cannot protect the ignorant and gullible from themselves, but to prey on them is despicable.