So, I was told to not use Signal, so all that is left is Matrix. And I am not techy enough to have my own server and neither are my relatives, so Matrix.org is the only option

  • refalo@programming.dev
    link
    fedilink
    arrow-up
    6
    arrow-down
    2
    ·
    1 year ago

    Unfortunately even with E2EE, the admins of a homeserver can still impersonate you or take over your channel.

    Of course you could run your own instance, or maybe none of this is part of your threat model, but I felt like bringing it up either way.

    • kevincox@lemmy.ml
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      That isn’t what that document says. It says that they can impersonate you in non-E2EE scenarios. The clients I use warn me when a message isn’t properly encrypted so someone without E2EE keys can’t impersonate someone in an E2EE room.

      That being said the general concept is a problem. I would love to see progress where all events from a user are signed by a device key and non-forgable. There is some thinking about this with portable identities (such as MSC2787) where you server is basically just storing and forwarding events but the root of trust is your identity and keys that you control. But none of this will land soon, not for many years.