this post was submitted on 17 Nov 2023
262 points (94.0% liked)
Memes
45589 readers
1607 users here now
Rules:
- Be civil and nice.
- Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I heard XMPP is better though. Servers are way less hard on resources, its way simpler and just as secure. Decentralization, you can share all sorts of files and all, but video calls are simply done by another provider like Jitsi
I am using both for enough long time,mutlidevice synchronization it's nightmare in xmpp,also usual xmpp isplaintext.So when u wanna use encryptions like omemo so far not always guaranteed that ur encryption key will be delivered to ur new device which u connected.Also u cannot control sessions.So if u would be hacked u would not be notified,and u don't have ability to kick out this dude session.But yes xmpp more light about resources and works faster for now.
Thanks for the info!
Yeah sessions should be controlled but are a pretty modern feature. Simply using strong passwords or even hardare OTP would be great. But for sure, a downside.
Transferring private keys is interesting, this is pretty userul, true. signal to this day does not work here for me, so I prefer using it as a messenger, for temporary things. Afaik my matrix experience was better here.
Re: resources: Dendrite is a full server rewrite for Matrix.
I just have to get it working first...
Xmpp is long in the tooth, many basic things are missing, like sending a image with a text caption. Or sending a group of photos as an album, instead you can only make many many image posts.
Lots of oh so small things
The base procotol doesn't have E2EE. You can do E2EE still but something to keep in mind.
This is true, since the base protocol is dead simple without many frills since its goals is real-time communications, not a chat-specific protocol for humans (TLS is good enough for certain applications of the protocol). That said, most modern clients support PGP & OMEMO with many having the encryption on by default and required is usually an option as well. There were some talks about simplifying the OMEMO setup in the future, but it’s good enough for now. See Are we OMEMO yet? for client suggestions.
Oh interesting, I'll check it out. I'm hosting my own server and I'm the only user on it, so it's been pretty snappy :P