Comment

Comment on Good news, UK Discord users, we're part of a Peter Thiel-linked data collection "experiment"

nothrone@lemmy.dbzer0.com ⁨1⁩ ⁨week⁩ ago

You seem to be knowledgeable about XMPP… How does XMPP’s E2EE compare to matrix’?

I tried XMPP and Matrix a few days ago. The XMPP experience is SO MUCH BETTER. HOLLY FUCK.

Matrix is so laggy and clunky and slow and annoying. XMPP was just perfect. And the “Conversations” client, for XMPP, is so fucking fast. It is missing a few things, such as swipe to quote/reply to a given message, but damn, is it fast.

source

Sort:hotnew top

CafeFrog@lemmy.cafe ⁨1⁩ ⁨week⁩ ago
As far as I know, XMPP’s OMEMO encryption is modeled off of Signal’s encryption, but modified to function without a centralized server. It’s generally regarded as a very solid, strong encryption, even better than openPGP.

Matrix’s encryption uses Megolm or olm, which I believe is also regarded well, the issue is that Matrix’s inherent design means it’s spreading copies of the metadata of those messages (though the contents of the message itself is encrypted) far and wide to many servers unnessesarily. Seeing as a lot can still be gleaned from metadata (when a message was sent, to who it was sent to), it’s a concerning model considering how big the main Matrix server is, which means that it usually always receives a copy of all metadata activity on the protocol, unless a self-hosted server completely kills federation (which defeats the point of it).

A good comment from an older reddit thread summed it up well:

matrix.org is unique because it hosts so many user accounts. As a result, it becomes a metadata honeypot for the entire matrix network. It’s kind of a design flaw in my eyes. Matrix is great. But it would be even better if it didn’t have this issue.

Xmpp is federated, but you have the option of not sharing chat metadata with other servers on the network. Matrix doesn’t give that option. matrix.org is effectively a central server due to the fact that a majority of accounts are hosted there, AND all metadata associated with those accounts, which includes metadata from other servers they communicate with, accumulates on matrix.org. I would suspect a very high percentage of matrix metadata, ends up on a single server. Xmpp just does not have this problem.

source