photog.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A place for your photos and banter. Photog first is our motto Please refer to the site rules before posting.

Administered by:

Server stats:

247
active users

#deltachat

14 posts12 participants4 posts today

Comparing #XMPP against #email protocols is too limited. What sets #deltachat apart is *vertical integration* and being driven by UI/UX considerations. Cross-platform Apps and Bots use the Rust core library which connects with #chatmail relays and classic email servers based on a higher level API -- abstracting over SMTP, MIME, #OpenPGP etc. See chatmail.at

#webxdc apps in turn use an even higher level stable API abstracting over email/xmpp/... see webxdc.org/docs/

chatmail.atChatmailChatmail provides FOSS infrastructure for interoperable, secure, speedy and reliable end-to-end encrypted messaging. Check out clients as Arcane Chat, Bots or Delta Chat today!

Doncs és una bona opció tenir servidor #chatmail propi per #DeltaChat en un servidor molt baratet a Hetzner Cloud. Ja porta 28 dies funcionant a la perfecció.
chatmail va genial amb pocs recursos de màquina com és el cas.
A més, el sistema operatiu és #Debian 12, estabilitat a prova de bombes.

Replied in thread

@pixelschubsi @treefit

The point is that DeltaChat didn't invent a new protocol, start something from scratch and write the software for it from the first line. As there is a saying:

Good programmers write programs from scratch. Great programmers find an already existing program and use it as a base.

#DeltaChat didn't invent #Email, #PGP, #autocrypt or new technology for #webxdc. Even WebXDC's real time channels don't use a technology invented by DC.

Considering that both #XMPP and #Matrix re-invented #decentralized communication while #email was already there, makes #deltachat more interesting.

The fact that DC didn't invent a new protocol for #InstantMessaging and just used the protocol which was already there, and also that how far has it gone, is mind blowing.

At first when I was chatting with @treefit, I already was developing a Matrix client(#chooj) for #KaiOS and it was the only decentralized IM which I was using and investing resources into. I was skeptical but then I thought it would be a good idea to invest into DeltaChat, as well as Matrix. His argument, of course, wasn't good. He was arguing that we need multiple options in the case one of decentralized IMs fail. However this convinced me to give DC a try.

But now, I see that DC has very unique advantages no other messenger has. Their moto is "playing the long term" game. Unlike Matrix which suddenly exploded, DC moves very slowly. As an advantage, DC is much more consistent, hassle free, has less bugs(in my experience) and has better UI/UX than many Matrix clients. But it has got several disadvantages. Matrix has tons more features which DC hasn't got or has added them just recently such as editing messages and reactions. And it is not yet suitable for public groups, like the ones we've got in the Matrix network.

Overall, if you want secure chat with friends or family or other people you trust, DeltaChat is a very good option and the experience is very good. And I haven't seen something like #webxdc in any other IM. However if you want something like #Discord guilds for a community, Matrix is the way to go.

BTW, DC currently lacks funding, thanks to what #Trump did with #OpenTechnologyFund(#OTF). If you can help in anyway, financial or otherwise, it will be extra valuable at this point.

Edit:

BTW, here are websites of webxdc and DC:

delta.chat
webxdc.org/

Edit2: Make sure to check WebXDC, apps shared in #P2P deltachat groups or DMs.

delta.chatDelta Chat: The e-mail messengerChat over e-mail and head back to the future with us! Delta Chat is like Telegram or Whatsapp but without the tracking or central control. Delta Chat does not need your phone number. Check out our ...
#IM#FOSS#Messenger

our friends over at @rpgp just published a monster milestone, humbly tagged 0.16 😍 with

- streaming decryption and encryption

- post-quantum-cryptography

- API streamlining.

#rPGP is a full Rust implementation of #openpgp which counts among the fastest and most compliant implementations today, and includes security audits. Note: #deltachat uses a restricted subset of OpenPGP, and follows best practices (eg using the same ed25519 keys implementation as #signal) github.com/rpgp/rpgp/

OpenPGP implemented in pure Rust, permissively licensed - rpgp/rpgp
GitHubGitHub - rpgp/rpgp: OpenPGP implemented in pure Rust, permissively licensedOpenPGP implemented in pure Rust, permissively licensed - rpgp/rpgp
Replied to Tanja 🔜 GPN23

@tanja yes, there is a pre-discussed concept for sealed sender maybe along with sealed recipients while we are at it. Base idea is to use fixed-format alias chatmail addresses for recipients and allow unauthenticated sending from noreply@chatmailserver to such fixed-format alias addresses (which #deltachat devices learn about through chatting).

Replied to Delta Chat

@delta thank you so much for responding :3

Are there any plans for something like sealed-sender?

I imagine that'd be rather difficult with existing mail standards.

At least for me, Signals sealed-sender has never failed me yet (apart from the first message in new conversations), at least the sealed-sender icon appears in every message I've sent in the info screen.

(How) could this be implemented in #deltachat ?

When I send a message using @delta, can people in control of the chat server see who sent it?

Can people in control of the chat server know what group I'm sending to, if it's a group chat?

As far as I'm aware, @signalapp prevents at least the first one, and has mitigations for correlation attacks (where one user sends a message, and the same 5 others happen to receive one at the exact same time, every time). Does #deltachat have that?

Am I missing something here? :breadthink:

Replied in thread

@rohden Heh, you caught it :) Indeed bots running some LLM for audio transcription or image generation exist. But they are not part of the UI/UX of #deltachat itself, or of its #chatmail core Rust library. Bots and #webxdc apps are behind extension points where we intentionally don't control or even know what people use.

By design, end-to-end-encrypting #deltachat and #webxdc apps only need ephemeral transport. It's a big deal. Let's compare:

- #matrix home servers maintain a cryptographic forever-chain of cleartext social-graph metadata.

- #WhatsApp servers maintain cleartext metadata visible to Meta.

- #Signal keeps encrypted metadata, hosted at GAFAM

#chatmail relays do not persist any social graph state, also not in encrypted form. A key goal of our designs: chatmail operators can sleep well at night :)

Replied to BjoernAusGE

@bjoern @chfkch @delta well it shows that the #deltachat core library can run inside of a home assistant add-on. the same core library is also used for writing bots.

So should be possible, but I don't know #HomeAssistant development enough to say for sure. Like can I expose actions from an add-on, that you can trigger from the home assistant UI, or would I need to extend home assistant itself for that?

The last two days saw the number of push notifications spike. Sometimes 80K Google Play push notifications happened per hour, while the baseline was more around 10-20K. These spikes probably indicate Internet availability. #deltachat is offline-first: you can write messages and attach media, create groups, use #webxdc apps, setup a second device etc. all without any Internet. Once it returns queued messages are sent out and cause push notifications. #OfflineFirst is crucial for resiliency.

Replied in thread

@silhouette @richi @signalapp @torproject

1. You completely miss the points! There is no "#TechnicalNecessity" to demand #PII like a #PhoneNumber - espechally for a "#privacy"-focussed messenger!

2. & 3. #Signal is able and willing to comply with #Cyberfacism and pushing a #Shitcoin (#MobileCoin) makes it trivial to criminalize the App for "illegal & unregilated banking". If #Moxie or @Mer__edith cared they'd yeet that thing (or didn't even integrate it to begin with!) to avoid the attention. And yes Signal does restrict the App functionality when using a phone number from #Russia & #Iran (among other nations), thus affecting not only those in need of safe comms but by sending a verification code to them, earmarking them for police & intelligence. Which bings.me to the 1st agrument.

4. #Tor has a stellar record in terms of stability, integrity and censorship circumvention. DIY'ing something instead if following almost two decades of solid progress is absurd and violates "don't roll your own crypto" as a rule!

5. Only with #SelfCustody can you protect your own data. Or do you really expect Staff from Signal to not talk when facing lifetime in jail? If they have the keys, they can decrypt it, thus their #E2EE is just a "#TrustMeBro!" concept. I mean, what prevents them from being forced into backdooring all comms to @icij as per #NSL? Any "guarantee" without self-custody is worthless by virtue of being unenforceable!

Signal pushing #TechPopulism instead of teaching folks that their #ComSec is worth diddly-piss wothout.#OpSec, #InfoSec & #ITsec is dangerous!

  • And yes claiming "JuSt UsE sIgNaL!" is dangerous in the era of #Trump's #cyberfacist regime acting as it does (like with the #ICC)!

Not to mention there are better options that don't do that shite (i.e. demand PII) and just work. @monocles / #monoclesChat & @delta / #deltaChat for example can adapt way better to said risks and ain't run by a #VCmoneyBurningParty!

Avatar for silhouette
dumbfuckingweb.sitePost by sleepy silhouette, @silhouette@dumbfuckingweb.site@kkarhan@infosec.space @richi@vmst.io @signalapp@mastodon.world @torproject@mastodon.social >PII afaik the only info is that you have registered to Signal and the last time you've connected. Other services do this too, for technical reasons. >USA irrelevant given the guarantees of their E2...