Live data from Hacker News

Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

matrix.org

21–30 of 204 posts

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#21
I tried matrix/riot out, looks perfect for me and app is slick.

Sending messages though from a server to a room was more difficult than I expected. Java SDK didn't build and many of the other languages were alpha too. Go seemed favored but I dont really want to install. Is there a recommended simple command line app or script to send messages?

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#22

Earlier quoted context omitted.

What do you mean ?

If progressively more governmental communications are made through encrypted means, we cannot access them as citizens.

End to End encrypted does not mean the messages have to be stored and retained encrypted and inaccessible. I imagine the responsible sysadmins have figured out something to follow retention laws.

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#24

well, this is what scares me. because, the conversation may be encrypted (protocol, packets), but still messages can be accessible by the powers that be through variety of means. especially considering they "forked" it, who knows what they will do with it (log keystrokes, take screenshots, in the disguise of diagnostic reasons?). anytime you are reading a message from your app, or sending a message, the app have all…

From the 2nd paragraph:

    We understand the whole project is going to be released entirely open source (other than the operational bits) 
    – development is well under way and an early proof of concept is already circulating within various government 
    entities.
But if it has interop with the matrix, you should just be able to use Riot.

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#25
post #21

I tried matrix/riot out, looks perfect for me and app is slick. Sending messages though from a server to a room was more difficult than I expected. Java SDK didn't build and many of the other languages were alpha too. Go seemed favored but I dont really want to install. Is there a recommended simple command line app or script to send messages?

curl? O:-) Matrix is intended to be simple enough that you don’t even need an SDK unless you really want one.

which java sdk did you try?

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#26

Earlier quoted context omitted.

What do you mean ?

If progressively more governmental communications are made through encrypted means, we cannot access them as citizens.

And this is somewhat okay. Though in my opinion there should be some way to lawfully intercept, this brings us back to the same dilemma as with private messaging.

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#27
post #21

I tried matrix/riot out, looks perfect for me and app is slick. Sending messages though from a server to a room was more difficult than I expected. Java SDK didn't build and many of the other languages were alpha too. Go seemed favored but I dont really want to install. Is there a recommended simple command line app or script to send messages?

curl? O:-) Matrix is intended to be simple enough that you don’t even need an SDK unless you really want one. which java sdk did you try?

thanks, I thought it was a bit more complicated with session ids etc, will look at keeping it simple again.

I used the Java SDK from Kamax that was on https://matrix.org/docs/projects/try-matrix-now.html. would be nice if there are others.

I'm excited about it though - is just what I've been looking for.

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#28
post #2

Will this make end-to-end encryption finally get the polish it needs?

Do you feel like WhatsApp is not polished?

If polish is broadly defined as "something that was hitherto still missing in (claimed-to-be) end to end encrypted chat applications", then open source and a decent profit model are definitely features lacking from WhatsApp. Telegram is open source, but one has to consciously turn on encryption and it doesn't work on the web or desktop clients (and the profit model is non-existent). Signal doesn't work without Google services and requires a phone number and turned-on phone iirc (and their profit model seems to be extorting companies like Wire and helping closed source software like Whatsapp advertise with Signal-level encryption). Wire is the best of all, but the Android app drains battery and everything is web (slow, bulky; Electron). None of the above work in a decentralized manner, either.

I don't know much about Matrix or Riot.im (from what I remembered, it was a implemented IRC alternative), but if it delivers on all of the above (and the article sure sounds like it), then it's definitely polishing up some final features that were still missing!

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#29
post #2

Will this make end-to-end encryption finally get the polish it needs?

Do you feel like WhatsApp is not polished?

Do you really believe that Facebook (US company) has not complied with the US goverment and WhatsApp is safe for private communication?

Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App

#30

Do the French make their own hardware? An encryption app is useless if you don't 100% trust the hardware. Tainted hardware could figure out, log and send your keystrokes from screen taps/swipes all from silicon.

Its a fallacy of composition to say that better security useless unless its perfect security.

This is better that it was before. More security is better. Perfect security does not and cannot realistically exist for a complex system.

I do think have a reproducible binary would be a huge win. Even if you can't verify the integrity of a single build you could verify that build by consensus.

Post reply on HN