Matrix at FOSDEM 2019

Re:Matrix at FOSDEM 2019 by Arathorn on Tuesday February 05, 2019 @03:32AM (#19083758)

tptacek: the reddit article there is a bit flawed (as uhoreg tries to gently point out in the response). the reality is that we provide decent E2EE stacks on web, iOS and Android which get used in the flagship client (Riot) that most people use. These are pretty solid and getting better, as per the SAS verif and cross-signing work. Other clients like Seaglass which build on the same SDKs obviously get the same experience. I would argue that these provide a decent decentralised alternative to Signal, WA or Wire, especially if you run your own server (given we don’t do log minimisation on matrix.org).

Now, there’s a long tail of other random clients which don’t do E2EE, which is inevitable given doing a good secure job of an independent E2EE implementation is obviously tough. But is that actually a problem, given the most usable mainstream clients do have it?

It’s a bit like declaring that the Web is in a disastrous sad state because of the number of HTTP clients out there which don’t have a CSS engine in them...

[ Parent | on HN ]

Re:Matrix at FOSDEM 2019 by Vinnl on Tuesday February 05, 2019 @06:07AM (#19084265)

> Now, there’s a long tail of other random clients which don’t do E2EE, which is inevitable given doing a good secure job of an independent E2EE implementation is obviously tough. But is that actually a problem, given the most usable mainstream clients do have it?

Well, given that decentralisation is the primary differentiator from Signal (as far as I can see), everybody having to use the same client to get it is a bummer. I would even go as far as to say that it's a clear example of the problems Moxie sees with making Signal decentralised.

[ Parent | on HN ]

Re:Matrix at FOSDEM 2019 by Arathorn on Tuesday February 05, 2019 @06:59AM (#19084518)

But they don't have to use the same client? The web, iOS/macOS & Android SDKs are completely independent, and have different clients written on them. Riot may be the main one, but Seaglass (on the macOS SDK) has full E2E support, and there are loads of projects building on the matrix-js-sdk which inherit its E2E support. Meanwhile the nheko project has an independent from-scratch implementation of the E2E stack, Fractal is adding it too (thanks to funding from Purism), and even Pidgin has it (albeit read-only currently). (N.B. that the reddit post gets almost all of this wrong :|)

So yes: Moxie has a point that the more implementations you have, the more bugs and security holes you may have, and the slower the project can evolve. But for us, freedom to control your own data and conversations and provide an open network & platform to build on is more important.

[ Parent | on HN ]

Re:Matrix at FOSDEM 2019 by dane-pgp on Tuesday February 05, 2019 @06:20PM (#19091116)

> Meanwhile the nheko project has an independent from-scratch implementation of the E2E stack

True, but here is the repo:

https://github.com/mujx/nheko

"Note regarding End-to-End encryption - Currently the implementation is at best a proof of concept and it should only be used for testing purposes."

and:

"No longer maintained - Desktop client for the Matrix protocol"

[ Parent | on HN ]

Re:Matrix at FOSDEM 2019 by Vinnl on Tuesday February 05, 2019 @08:38AM (#19085119)

Sure, not exactly the same client, but at least you should make sure that none of the participants use one of the long tail of non-mainstream clients. Being able to do so would be one of the main selling points of decentralisation for me.

[ Parent | on HN ]

Re:Matrix at FOSDEM 2019 by muvek on Tuesday February 05, 2019 @04:32AM (#19083959)

Those other "random clients" (as you call them) exist because your desktop client is bad. And I am being nice by just calling it "bad", it is the least performant client I have ever come across, even counting other electron-based software.

[ Parent | on HN ]

Re:Matrix at FOSDEM 2019 by Arathorn on Tuesday February 05, 2019 @07:00AM (#19084523)

yup, the electron app sucks :) we are very very glad folks are writing native clients, and can't wait to kill it off. meanwhile we're working on its perf anyway, and if you look at the client redesign in the OP (riot.im/develop) you'll see it's actually getting better.

[ Parent | on HN ]

Re:Matrix at FOSDEM 2019 by tedunangst on Tuesday February 05, 2019 @11:47AM (#19087004)

How does an encrypted client interoperate with a non encrypted client?

[ Parent | on HN ]

Re:Matrix at FOSDEM 2019 by Arathorn on Tuesday February 05, 2019 @01:28PM (#19088148)

encryption is configured per conversation. if you try to participate in an encrypted conversation on a client which doesn't support encryption, you simply won't see the messages.

[ Parent | on HN ]