Egregoros

Signal feed

Timeline

Post

Remote status

Context

1

I want to break a local community free from Signal, and I've been thinking about XMPP. In reading some analyses I found this gem:

https://lukesmith.xyz/articles/matrix-vs-xmpp/

I stopped using Signal because I just don't trust it. Why so many updates with no explanations? Is it so unstable and insecure that it needs them? Also, check out search results for running your own Signal server. Technically it's free software, but practically, good luck.

So I guess I need to figure out persistence and E2EE for XMPP, and land on a server and clients. I'm inclined towards ejabberd, because Erlang!

I'd welcome thoughts.

#xmpp #jabber #signal #matrix

I am not really keen on XMPP for e2ee stuff.

For me? The high water mark was already set by SILC (Secure Internet Live Conferencing) a long time ago.

Alas, so long ago that the silcnet.org domain seems dead.

The code is archived here: https://silc.github.io/

I think OpenBSD's ports still has it?

Other meaningful efforts in that space that I might have a shred of trust in exploring further:

PYSC2 (https://about.psyc.eu/PSYC2)

I haven't looked deeply into SimpleXChat (e.g. https://simplex.chat) but maybe that's a possibility for "mere mortals" (aka users who don't know how to compile code from source and aren't comfortable with TUIs/CLIs.)?

A lot of other stuff? (Wire, Telegram, Session, etc.) is just godawful.

Full disclosure: I know Moxie (and some other Signal devs) personally. I also know the lead dev of PSYC2 personally. If my life were on the line?

I would not trust a single one of the Signal devs I know, just the opposite. They have been absolutely awful to me.