-

Fri, 25 Mar 2022 18:32:47 +0100

matrix@mastodon.matrix.org

Lots of excitement today with confirmation of the EU's breakthrough #DMA legislation, mandating that big tech must provide documented open comms APIs. 🎉🎊😱 But there's also been concern that open APIs could undermine E2E encryption: our viewpoint is at https://matrix.org/blog/2022/03/25/interoperability-without-sacrificing-privacy-matrix-and-the-dma

Fri, 25 Mar 2022 18:50:35 +0100

Hans van Zijst

hans@social.woefdram.nl

If the rag-tag Matrix ecosystem can do it, it doesn’t seem unreasonable to think that a $600B company like Meta can figure it out too...

Amen!

Fri, 25 Mar 2022 19:10:07 +0100

Aminda Suomalainen

https://social.snopyta.org/@mikaela

I still have concerns with #Matrix and #privacy, https://www.aminda.eu/blog/english/2021/08/03/matrix-perfect-privacy-not.html#you-mentioned-privacy

In this case #WhatsApp would provide self-destructing messages that
@matrix doesn't support unless you count m.room.retention that is apparently experimental and shouldn't be used. https://github.com/matrix-org/synapse/issues/11279

Sure there is a ticket since 2016, but not much activity that I can publicly see https://github.com/vector-im/element-meta/issues/82

Fri, 25 Mar 2022 19:18:20 +0100

Hans van Zijst

hans@social.woefdram.nl

@Aminda Suomalainen Reliance on self-destructing messages is dangerous. There's no guarantee that a message is actually destroyed, other than on the platform it was designed for.

#Signal, for example, has had self-destructing messages for a long time, but if I send someone a password by means of a self-destructing message, I can be pretty sure the recipient will save that message somewhere before it disappears. And that "somewhere" is probably less secure than the encrypted message it is in Signal.

Same goes for every kind of self-destructing message: it may help to keep information private, but it's certainly not the silver bullet some think it is.