99
submitted 1 year ago by Pantherina@feddit.de to c/privacy@lemmy.ml

I recently saw Alex's video about XMPP and I got curious.

I am using Element and Schildichat a bit, trying Element X and curious about the new Development here. It seems vibrant, they rewrite stuff in rust, the Apps are fancy and all.

But I tried Conversations and it seems based too, has transparent encryption, it is damn fast, usable, supports groups and files and all. Probably doesnt use the latest fancy Android SDKs but it seems solid.

I was surprised about how fast it was, as Matrix drastically varies per server. But also I found many dead communities, and in general I dont see XMPP at all, while many Projects (if not using Discord, bruh...) have a Matrix room.

How secure is OMEMO in todays standards? Or OpenPGP, compared to Matrix or Signal Encryption? I heard it also has rotating keys and all.

There are other things, like permission systems, chosen federation, privacy, bridge support and more, that are interesting. Are there advanced modern WebUIs for XMPP you like?

I saw that it uses up waaay less resources, why is that? Really, is "simply encrypted mail" somehow worse in an important way?

Similar to IRC, where I never found nice usable apps for my taste, I thought XMPP was deprecated, but that doesnt seem so?

What can you tell me about XMPP, is it modern, secure, privacy friendly?

you are viewing a single comment's thread
view the rest of the comments
[-] TCB13@lemmy.world -3 points 1 year ago

Matrix is developed by a for profit entity, a group of venture capitalists and having a spec doesn't mean everything. XMPP is an open standard, truly open and if you notice you've had a lot of implementations of it all able to properly integrate with each other without effort.

The way Matrix is designed is to force into jumping through hoops and kind of draw all attention to Matrix itself instead of the end result. The kind of open collaboration where the protocol becomes mostly invisible for the end user isn't just the objective of Matrix.

[-] TheAgeOfSuperboredom@lemmy.ca 7 points 1 year ago

Sorry, but nothing you mentioned has anything to do with Matrix not being an open protocol. I don't know what you mean by "truly open". It sounds like a "no true Scotsman" argument.

The spec is absolutely open, and you can see it in what I linked. There are also several servers and several clients if you don't like one written by the Matrix or Element folks. Heck, there's even a client for emacs! Now there are compatibility issues since not every server and client implements the entire protocol yet, but that's not an issue of openness. I used to run into problems all the time with XMPP way back when for similar reasons. I even recall something about Google breaking the XMPP protocol in some ways and causing problems.

I'm not even sure your claim of VC funding is true, since the faq mentions several non VC sources of funding. I couldn't find anything about VC at element.io, so maybe it's hidden there, or something has changed a matrix.org?

Still, discussion about not liking their business model is orthogonal to whether the protocol is open or not. Maybe we run the risk of them pulling a HashiCorp and changing some licensing down the road, which would be terrible. But I think it's dishonest to say it's not open.

[-] poVoq@slrpnk.net 4 points 1 year ago* (last edited 1 year ago)

Try contributing to the Matrix specs. It literally has a paywall (only contributing foundation members can do it) and basically any proposal that does not further the business goals of Element gets shot down by the overwhelming majority of Element employees or affiliates on the Matrix foundation board.

So while the protocol is open to use, it does not really fulfill the typical requirement of openess in so far that it is also open for contributions and changes.

This is totally different from the truly open standardisation process for XMPP where anyone can contribute freely and no single company dominates the process.

Edit: the VC funding is for Element / New Vector, but that company fully controls the Matrix Foundation.

[-] chayleaf@lemmy.ml 6 points 1 year ago

no? anyone can send a spec proposal here. After discussion and implementation, it may well be accepted.

[-] poVoq@slrpnk.net -3 points 1 year ago

Sure, you can beg them to consider your proposal, but I hope you do realize that this isn't the same as an open standardization process, right?

[-] chayleaf@lemmy.ml 6 points 1 year ago

sorry, goalpost moving isn't my favorite sport

[-] poVoq@slrpnk.net 1 points 1 year ago

The original objection was about it not being and "open protocol", which is not the same as having the source code of an implementation under an open source license.

That Matrix isn't an open protocol has always been one of the core objections against it. This isn't moving goal-posts, and if you fail to understand the original objection then why are you even commenting on it?

[-] slacktoid@lemmy.ml 5 points 1 year ago

What is an open standardization process?

[-] poVoq@slrpnk.net 1 points 1 year ago
[-] slacktoid@lemmy.ml 3 points 1 year ago

This is xmpps open standardization process. Its good. Its also similar to matrix in that you propose and people comment on it. They both have the core elements needed to be an open standardization process. So stop gatekeeping.

[-] poVoq@slrpnk.net 2 points 1 year ago

No you fail to see the vital difference that the Matrix Foundation process is only open to paying members and that a single for-profit company is currently absolutly dominating the Foundation board that has the final say.

On the XSF anyone can easily become a member and get voted in a fair democratic election into the council. I know that several members are just community members with no corporate backing and they have the same if not more weight in the decision making as everyone else.

[-] slacktoid@lemmy.ml 2 points 1 year ago

Then outline the ways they are different and source it.

[-] poVoq@slrpnk.net 1 points 1 year ago* (last edited 1 year ago)

I just did, and you can look up the how little oversight and accountability there really here: https://matrix.org/membership/

To look up who the guardians and core spec team is you can scroll to the bottom here: https://matrix.org/about/ (Note that basically all of them are very closely affiliated the Element the for-profit company).

Tl;dr the Matrix Foundation is a sham to hide that Element the company calls all the shots and has no interested at all in an truly open standards process.

load more comments (12 replies)
load more comments (13 replies)
load more comments (16 replies)
this post was submitted on 02 Nov 2023
99 points (96.3% liked)

Privacy

32159 readers
557 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS