Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We have lift-off Element X, Call and Server Suite are ready

element.io

Post reply on HN
Print view View original

81–90 of 120 posts

Re: We have lift-off Element X, Call and Server Suite are ready

#81

Post by Arathorn »

deskamess wrote: post #56

Is ESS an OpenID compatible server, or does it integrate with OpenID backend? Looking for an OpenID provider for a small-medium friends & family group, so was hoping this fits the bill. There is a dearth of information on this aspect of the product line.

hm, i wrote an answer on this but it seems to have vanished.

ESS uses Matrix Authentication Service (https://github.com/element-hq/matrix-authentication-service/) which is a very lightweight Matrix-aware rust OIDC IdP intended for embedding into Matrix homeservers to make them OIDC-capable. It provides the same featureset as pre-OIDC Matrix auth, and then lets you delegate to an upstream IdP (keycloak, authentik, forgerock etc) for a full featureset (2FA, MFA, etc).

Re: We have lift-off Element X, Call and Server Suite are ready

#82

Post by Arathorn »

pid-1 wrote: post #47

Why would any enterprise use e2e encryption? In most juridictions and industries you must be able to audit internal and b2b communication.

so that when someone pwns your chat server, they don't walk off with all your communication history.

If you want audit, you then add it on separately, in a separate locked-down deployment, compartmentalised from the rest of your infra and the chat server, so that an attacker would need to pwn an audit client connected to that instead.

Re: We have lift-off Element X, Call and Server Suite are ready

#83

Post by Arathorn »

thewanderer1983 wrote: post #46

Not to rain on their parade, but as someone who used element X, gave up because of the bugs. Is currently using XMPP with conversation.im and dino.im. The later seems much more stable, offer OMEMO encryption that worked better. If you want more social media elements there is also movin.eu.

I for one am shocked and stunned that early Element X builds had bugs. Now that we've finally launched it for general availability, hopefully the situation is better :)

Re: We have lift-off Element X, Call and Server Suite are ready

#84

Post by Arathorn »

notpushkin wrote: post #32
Bairfhionn wrote: post #6

Earlier quoted context omitted.

Or like the actual title of the blog entry? > We have lift-off! Element X, Call and Server Suite are ready! Just some url/tag parsing/generation gone wrong.

I think it’s the anti-clickbait thing removing the exclamation marks. (Personally, I’d just leave “Element X, Call and Server Suite are ready”)

yeah, it's just HN autoeditorialising the headline.

Re: We have lift-off Element X, Call and Server Suite are ready

#85

Post by Arathorn »

Aissen wrote: post #22

How does one browse rooms on a server using Element X for Android?

browsing rooms is deliberately not implemented in Element X yet; it's intended more as an imessage/whatsapp style messenger - plus exposing the matrix.org room directory make appstore review & age-rating etc much more complicated.

Re: We have lift-off Element X, Call and Server Suite are ready

#87

Post by Arathorn »

Arathorn wrote: post #81
deskamess wrote: post #56

Is ESS an OpenID compatible server, or does it integrate with OpenID backend? Looking for an OpenID provider for a small-medium friends & family group, so was hoping this fits the bill. There is a dearth of information on this aspect of the product line.

hm, i wrote an answer on this but it seems to have vanished. ESS uses Matrix Authentication Service ( https://github.com/element-hq/matrix-authentication-service/ ) which is a very lightweight Matrix-aware rust OIDC IdP intended for embedding into Matrix homeservers to make them OIDC-capable. It provides the same featureset as pre-OIDC Matrix auth, and then lets you delegate to an upstream IdP (keycloak, authentik, f…

Also: https://sspaeth.de/2024/08/matrix-server-with-nextcloud-logi... is a great explanation of how to deploy MAS with an upstream OIDC IdP (NextCloud in this instance).

Re: We have lift-off Element X, Call and Server Suite are ready

#88

Post by Arathorn »

Arathorn wrote: post #67
turblety wrote: post #23

I really hope this fixed a bunch of encryption and key issues. We ran Element for our dev team for 6 months and had to give up because frequently a person would just not be able to decrypt a message, warnings would appear but there was no way to solve this. So literally people where missing messages and just having to ask people to post the message again (because there was no way to request the keys be sent). It was…

We have done a huge amount of work on fixing E2EE issues - when running latest matrix-rust-sdk clients (e.g. Element X) and matrix-js-sdk using matrix-rust-sdk-crypto (e.g. Element Web/Desktop), "unable to decrypt" bugs should be unheard of. So, the point of this blog post is to try to spell out that we've fixed this. Meanwhile if you see ANY unable to decrypt errors, PLEASE submit debug logs on both the sender & rec…

btw, there should be a great talk The Matrix Conference tomorrow about this: https://cfp.matrix.org/matrixconf2024/talk/8BVVT3/

See also https://cfp.matrix.org/matrixconf2024/schedule/ for all the other Matrix stuff happening over the next 2 days :)

Re: We have lift-off Element X, Call and Server Suite are ready

#89

Post by SushiHippie »

ffo wrote: post #69
SushiHippie wrote: post #68

Earlier quoted context omitted.

Regarding my use case, I'm basically the only user (I have multiple accounts, but I'm still the only person using this), I just needed a way to have one login for all my self-hosted services e.g. Nextcloud, Gitea, … The story is, at first I used Zitadel, after trying out multiple other things like Keycloak or Ory, and then switched to Authentik, because I didn't really like the UI of Zitadel (too "enterprisy" for me,…

Thank you so much for the feedback, this really helps, even if you are a "solo" user! I see what you mean with "enterprisy", that has some truth to it ;-) We have some ideas to improve this and to reduce the learning curve for that. I guess from many people we could "hide" the whole multi-tenancy part and just given them a single organzitation to start with.

No worries, that would be really great!
Post reply on HN