What is better for privacy? Signal or Telegram? I know XMPP is better then both of them.

  • X_Cli@lemmy.ml
    link
    fedilink
    arrow-up
    10
    ·
    3 years ago

    I would not use either of them.

    Currently, a better solution, for me, is Element/Matrix, because the crypto is mostly OK and there is federation. And it is quite featureful.

      • X_Cli@lemmy.ml
        link
        fedilink
        arrow-up
        2
        ·
        3 years ago

        That’s a problem. But federation at least helps by giving you the choice of who will see these metadata leaks.

          • Dessalines@lemmy.ml
            link
            fedilink
            arrow-up
            4
            arrow-down
            3
            ·
            3 years ago

            The most that instance gets is a user name. With signal, or telegram, they get your real identity via your phone #.

            • kevincox@lemmy.ml
              link
              fedilink
              arrow-up
              9
              ·
              3 years ago

              That’s unfortunately not true. Lots of data in matrix is currently unencrypted. Message content is but state events (like the room topic), reactions, stickers (if your client supports them) are not.

              This is slowly improving (the proposal for encrypted state events is going to be a significant improvement) but unfortunately strong privacy doesn’t seem like a strong priority of the spec owners.

              If it was up to me I would block every new proposal until it had a strong privacy proposal, but instead their plan is to implement everything insecurely first. Then they will try to get people to propose private versions of the specs and try to drive adoption of those. Not a great plan for something that advertises itself as “an open network for secure, decentralized communication” if you ask me.

              • poVoq@lemmy.ml
                link
                fedilink
                arrow-up
                9
                ·
                3 years ago

                While true, it is also true that Matrix never claimed to be especially private. What ever your definition of “secure” and “decentralized” it is not the same as “privacy”.

                Matrix is mostly about censorship resilience and distributed networks.

              • X_Cli@lemmy.ml
                link
                fedilink
                arrow-up
                2
                ·
                edit-2
                3 years ago

                Thank you. I did not know that the state events were not encrypted. That’s very unfortunate. I think I still prefer Element/Matrix over Signal, but slightly less than before your message 👍

                • kevincox@lemmy.ml
                  link
                  fedilink
                  arrow-up
                  2
                  ·
                  3 years ago

                  Yeah, that is what bugs me most about this. They are adding new features and all the clients say “Your conversation is encrypted” but a lot of information isn’t. I also prefer Matrix but I do wish that they would put a higher value or privacy when evolving the spec.