be,
@be@floss.social avatar

Matrix

anthropy,
@anthropy@mastodon.derg.nz avatar

@be It's a funny and relatable meme haha, though it's worth saying it's not really exclusive to Matrix, it's just kind of a (skill) issue with (users of) end to end encrypted messaging. Same goes for Pidgin with OTR plugins, XMPP with OMEMU, etc.

IMHO I'd rather accidentally lose access to my messages, than every admin on that server being able to access those messages without a key/password/etc, kind of like how you can lose access to any other account :P but that's just my few worthless cents

be,
@be@floss.social avatar

@anthropy No, it's not a problem with users' skills. It's a problem of design. Signal does not have this problem.

anthropy,
@anthropy@mastodon.derg.nz avatar

@be from what I can tell, if you lose access to your last 'master device' on Signal, you lose all past messages, just like any other of these platforms.

Matrix works the same way, but it seems less forceful about verifying using other devices, resulting in master key mismatches or something along those lines, which is definitely a problem- but Signal is definitely not immune to it either from what I could tell. https://www.reddit.com/r/signal/comments/93sw9p/since_signal_is_e2e_encrypted_how_does_signal/

be,
@be@floss.social avatar

@anthropy Signal is immune to this problem. In many years of using Signal, I have not once seen an error about being unable to decrypt a message.

anthropy,
@anthropy@mastodon.derg.nz avatar

@be You need to store a master key in order to have end to end encryption. Since it cannot be stored on the server (it would break the purpose of end to end encryption), it is stored on the devices. If you lose the last device that has that key, you lose access to everything.

If you always log in using another device, thus copying the master device, you will never encounter this problem, which should be the same for any end to end encrypted platform.

be,
@be@floss.social avatar

@anthropy Yes, I think using a new key forever forward is a much better option than ever showing users an error about being unable to decrypt a message.

anthropy,
@anthropy@mastodon.derg.nz avatar

@be From what I can tell, the way Signal deals with it is by soft-forcing you to always log in with another device, calling otherwise logging in a 'recovery', clearing all messages.

Matrix is (unfortunately) much less adamant and clear about this, and thus you can create a mismatch of keys. They could definitely fix that, I much agree with that, because it makes it much more common for people to have this problem.

I also still very much like the meme, I didn't mean to shittalk that part ;P

kkarhan,
@kkarhan@mstdn.social avatar

@be never had thos problem with #XMPP + #OMEMO!

#matrix #EpicFail

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • Durango
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • osvaldo12
  • khanakhh
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • everett
  • ngwrru68w68
  • kavyap
  • InstantRegret
  • JUstTest
  • GTA5RPClips
  • cubers
  • ethstaker
  • normalnudes
  • tacticalgear
  • cisconetworking
  • tester
  • Leos
  • modclub
  • megavids
  • provamag3
  • anitta
  • lostlight
  • All magazines