this post was submitted on 05 Aug 2024
5 points (85.7% liked)

XMPP

304 readers
1 users here now

XMPP (aka Jabber) is the community-owned standard for real-time federated messaging.

For a quick start click here

JoinJabber.org support chat

JoinJabber.org admin support chat

XMPP.net Provider List

Also see JoinJabber.org FAQ

founded 1 year ago
MODERATORS
 

This blog post, and some of its comments are pretty interesting and concerning at the same time. Not really sure if in the end that means that nothing other than centralized controlled messaging can be as cryptography safe.

Any comments?

you are viewing a single comment's thread
view the rest of the comments
[–] u_tamtam@programming.dev 6 points 1 month ago (1 children)

I'm not a cryptographer, and so I can't really emit a judgement on the poster's abilities or reputation, but what's for sure is that this piece reads more like a bingo card of a person's favourite "crypto stuff" and how partially it overlaps with some characteristics of OMEMO, rather than a thorough and substantiated cryptanalysis of the protocol and its flaws for real-world usages and threats.

Some snarky remarks remarks like

OMEMO doesn’t attempt to provide even the vaguest rationale for its design choices, and appears to approach cryptography protocol specification with a care-free attitude.

are needlessly opinionated, inflammatory and unhelpful, and tell more about the author and their lack of due diligence (in reaching-out to people and reading past public discussions) than build a story of what the problem is, why it matters, and how to remediate it.

Don't get me wrong, I would love this piece to have been something else, and to reveal actual problems (which incidentally would have been a great boos to the author's credibility and fame, considering that OMEMO underwent several audits and assessments in the recent history, including by several state agencies in the German and French governments…), but here we are, with one more strongly opinionated piece of whatever on the internet, and no meat in it to make the world a better place.

[–] kixik@lemmy.ml 1 points 1 month ago

I see your point, many thanks !