News for hackers. Stuff that matters.

A comment on Cross-signing and end-to-end encryption by default. Parent comment

Re:Cross-signing and end-to-end encryption by default by 3r8riacz on Friday May 08, 2020 @12:45AM (#23111470)
Maybe now it's time to refresh the research papers on Matrix/Riot privacy concerns. After reading these a few months back, I wasn't so sure anymore that Matrix/Riot is what I can wholehartedly trust: https://github.com/libremonde-org/paper-research-privacy-mat...
[ Parent | on HN ]
Re:Cross-signing and end-to-end encryption by default by driminicus on Friday May 08, 2020 @03:24AM (#23112259)
Those research papers are written by a person that is (was?) making a hostile fork of the protocol. That is not to say everything in there was wrong, but it was blown out of proportion from my perspective.

Also: they are fairly old by now, and most complaints that have merit have been addressed.

[ Parent | on HN ]
Re:Cross-signing and end-to-end encryption by default by neiljohnson on Friday May 08, 2020 @04:33AM (#23112669)
> Also: they are fairly old by now, and most complaints that have merit have been addressed.

This blog post goes into more detail https://matrix.org/blog/2019/06/30/tightening-up-privacy-in-...

[ Parent | on HN ]
Re:Cross-signing and end-to-end encryption by default by Arathorn on Friday May 08, 2020 @04:45AM (#23112737)
Yeah, sadly the ‘research paper’ wasn’t updated after we fixed the issues it highlighted; see also https://matrix.org/blog/2019/09/27/privacy-improvements-in-s...
[ Parent | on HN ]