News for hackers. Stuff that matters.
Re:Serious vulnerabilities in Matrix’s end-to-end encryption... by tptacek on Friday September 30, 2022 @12:01AM (#33030761)
Signal didn't allow servers to control group membership prior to the 2019 design!
Re:Serious vulnerabilities in Matrix’s end-to-end encryption... by palata on Sunday October 02, 2022 @09:57AM (#33055897)
And the zero-knowledge groups still don't give that capability to the servers, do they?
Re:Serious vulnerabilities in Matrix’s end-to-end encryption... by tptacek on Sunday October 02, 2022 @09:07PM (#33062217)
No, of course not: it's part of the premise of a secure group messenger that the server can't control the groups. Which is what makes it so incredible that Matrix screwed this up so completely.