Cross-posted from : https://lemmy.ml/post/16566616

Hi, I wanna know what is the most secure and best messaging app/platform… Need an app that is crossplatform and has a very good numbers of features and security. (And it has to be FLOSS) I thought about XMPP clients, Signal, Session, IRC clients… Propose and explain me your choice

  • mox@lemmy.sdf.org
    link
    fedilink
    arrow-up
    16
    arrow-down
    1
    ·
    edit-2
    5 months ago

    There is no best, because none of them cover every use case or threat model. However, these are worth considering:

    • Matrix, if you don’t mind minor meta-data leaks (reactions and avatars have not yet been moved to the encrypted channel, IIRC).
    • XMPP with OMEMO, if all your contacts are technically skilled enough to manage the requisite clients, servers, and protocol extensions, or if they have a skilled admin to do it for them.
    • Signal, if you don’t mind linking a phone number to your account, can tolerate an ecosystem effectively married to Google, and accept the risks of a centralized service that can be attacked or shut down by someone with the right access or influence.

    In situations where your safety depends on anonymity from the powerful or well-connected, I would instead look for a messaging system tailored for such things. (It would, of course, require giving up some convenient features that most of us expect from a general-purpose chat platform.)

    • smileyhead@discuss.tchncs.de
      link
      fedilink
      arrow-up
      11
      ·
      5 months ago

      reactions and avatars have not yet been moved to the encrypted channel

      Fortunetly there is ongoing work to do that. Still admin sees who you are talking to, but there is some effort.

    • Blizzard@lemmy.zip
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      1
      ·
      5 months ago

      I think Signal dropped the phone number requirement, didn’t they?

      • BlueKey@kbin.run
        link
        fedilink
        arrow-up
        10
        ·
        5 months ago

        As far as I know you still need a phone number to create an account. But for connecting you can use the new usernames (and make sure to disable automatic number sharing with contacts in the settings).

      • youmaynotknow@lemmy.ml
        link
        fedilink
        arrow-up
        2
        ·
        5 months ago

        Now you’re able to hide your number at different levels, but it still requires you to use a phone number to sign up and use.

    • foremanguy@lemmy.mlOP
      link
      fedilink
      arrow-up
      2
      arrow-down
      1
      ·
      5 months ago

      In fact you could say that for now XMPP is the best in your opinion, but a bit technical?

      • mox@lemmy.sdf.org
        link
        fedilink
        arrow-up
        5
        ·
        5 months ago

        No, I would not say that.

        I used XMPP in the past, but long-lived public server support is almost nonexistent these days, and proper setup/maintenance requires too much tech skill for the general public. Also, it lacks modern features that many people have come to expect. I would only suggest it for small groups, and only if you can run your own server and provide tech support.

        For my needs, Matrix is the best available today. It covers the things that I find most important, and is constantly improving.

        • poVoq@slrpnk.net
          link
          fedilink
          arrow-up
          5
          ·
          edit-2
          5 months ago

          but long-lived public server support is almost nonexistent these days

          Uhm, that is untrue, especially compared to Matrix where multiple public servers recently had to shut down because of excessive server resource use.

          But yes, like in any healthy federation it is better to run your own XMPP server.