News for hackers. Stuff that matters.
Re:Signal can now be used without Google Play Services by chc4 on Monday February 20, 2017 @06:46PM (#13692051)
Does matrix even support end-to-end encryption? Last I checked it didn't have /any/, except maybe server-to-server and even that wasn't enabled.

I also seem to remember going over their homebrewed cryptographic rachet and it didn't properly HMAC.

EDIT: Apparently riot.im supports E2E, but it's not a part of the Matrix protocol and it's not encrypted by default. The Olm rachet was also audited by NCC, so that's nice.

Re:Signal can now be used without Google Play Services by Arathorn on Tuesday February 21, 2017 @09:14AM (#13695563)
E2E /is/ part of the Matrix protocol - it's just still in beta. The spec PRs haven't landed yet (http://matrix.org/speculator/spec/drafts%252Fe2e/client_serv...). Once out of beta it'll be turned on everywhere by default.
Re:Signal can now be used without Google Play Services by jdkfree on Monday February 20, 2017 @06:55PM (#13692079)
They have e2e on all devices now.
Re:Signal can now be used without Google Play Services by feld on Monday February 20, 2017 @09:47PM (#13692851)
But still no way to enforce or enable as default.