this post was submitted on 17 Sep 2023
129 points (82.1% liked)

Privacy

31954 readers
501 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] mojo@lemm.ee 0 points 1 year ago (1 children)

Huh interesting, I actually had no idea those big apps used XMPP. Would it be easy for them to add e2ee if they wanted to?

[–] u_tamtam@programming.dev 2 points 1 year ago

It depends, E2EE is mostly a client thing and most of them implement OMEMO as a standard: https://omemo.top/

OMEMO is XMPP's take on the double ratchet algorithm (very similar to Signal's), MLS is in the works as the hot new cross-protocols standard (but is inferior to OMEMO:2 when it comes to metadata encryption), PGP is often an option for the cases where perfect forward secrecy isn't desired, and OTR is still used in niche cases when you want E2EE across protocols.

In fact, E2EE was a thing in XMPP world since about 10 years… before Signal existed.