At the risk of falling afoul of the site guidelines, can I complain about an un common annoyance? Apparently this blog pulls a Facebook, or more precisely a fbclid, and adds ref=blog.phnx.im as a query parameter to every link. This seems less than fitting for a post on a privacy technology, and actually breaks the link to the IETF BoF minutes[1]. [1] https://datatracker.ietf.org/meeting/101/materials/minutes-1...
RFC 9420 a.k.a. Messaging Layer Security
21–30 of 35 posts
Re: RFC 9420 a.k.a. Messaging Layer Security
#22Earlier quoted context omitted.
I wonder how Google would actually implement that, given that "Google Messages", as far as I can tell, isn't really a "platform" (as stated in the linked article) but rather a client for RCS, which needs mobile operator support to work on Android, and to my knowledge does not work at all on iOS.
Yeah no. Google Messages (almost) always go through Google services, not carriers. They are definitely their own platform.
Re: RFC 9420 a.k.a. Messaging Layer Security
#23Full standard: https://datatracker.ietf.org/doc/html/rfc9420 With the EU's DMA requirements coming up, this is a major candidate for a standard protocol for messenger interoperability. There's no legal requirement to support it, but implementing an existing standard that supports end-to-end encryption seems like a much cheaper and safer method than building your own. Of course actual interoperability will depend on M…
Re: RFC 9420 a.k.a. Messaging Layer Security
#24What is the difference with the Matrix protocol? Matrix is already open-source, there are libraries publicly available that implement it, both for clients and serves, in different languages. Why not just adopting it?
One big difference is that the authors of this protocol have probably spent a lot of time at IETF meetings
Re: RFC 9420 a.k.a. Messaging Layer Security
#25At the risk of falling afoul of the site guidelines, can I complain about an un common annoyance? Apparently this blog pulls a Facebook, or more precisely a fbclid, and adds ref=blog.phnx.im as a query parameter to every link. This seems less than fitting for a post on a privacy technology, and actually breaks the link to the IETF BoF minutes[1]. [1] https://datatracker.ietf.org/meeting/101/materials/minutes-1...
Re: RFC 9420 a.k.a. Messaging Layer Security
#26What is the difference with the Matrix protocol? Matrix is already open-source, there are libraries publicly available that implement it, both for clients and serves, in different languages. Why not just adopting it?
The Matrix spec defines everything about how communication should happen—port discovery, federation, transport, wire formats, encodings, schemas, addresses for people, group membership, reconciliation of parallel histories, ..., and, yes, end-to-end cryptography. MLS is just the end-to-end cryptography part, how to turn it into bits, and a general idea of where the underlying network should deliver those bits. Nothin…
Re: RFC 9420 a.k.a. Messaging Layer Security
#27At the risk of falling afoul of the site guidelines, can I complain about an un common annoyance? Apparently this blog pulls a Facebook, or more precisely a fbclid, and adds ref=blog.phnx.im as a query parameter to every link. This seems less than fitting for a post on a privacy technology, and actually breaks the link to the IETF BoF minutes[1]. [1] https://datatracker.ietf.org/meeting/101/materials/minutes-1...
Re: RFC 9420 a.k.a. Messaging Layer Security
#28Does anyone know the status with respect to support for deniability / repudiation? I can't tell where they landed, and they seem to have deleted the paragraph from prior drafts that mostly left me more confused. https://datatracker.ietf.org/doc/html/draft-ietf-mls-archite... Previously, their designs had explicitly lacked this feature, and they said they actively didn't want it, citing "terrorism", resulting in argum…
That being said, there has been a low key effort to come up with an extension to MLS to introduce some notion of deniability. It is not published yet, but I will probably talk more about it at the upcoming MLS session at IETF117.
Re: RFC 9420 a.k.a. Messaging Layer Security
#29At the risk of falling afoul of the site guidelines, can I complain about an un common annoyance? Apparently this blog pulls a Facebook, or more precisely a fbclid, and adds ref=blog.phnx.im as a query parameter to every link. This seems less than fitting for a post on a privacy technology, and actually breaks the link to the IETF BoF minutes[1]. [1] https://datatracker.ietf.org/meeting/101/materials/minutes-1...
That's something ghost.org does by default. I unknowingly ran into the same issue for my blog.
Re: RFC 9420 a.k.a. Messaging Layer Security
#30The point is mostly there are plenty of security issues with existing systems that probably aren't easily fixed with another layer of crypto woowoo, and it makes me uncomfortable that crypto is used to justify marketing these systems as secure. How do you explain to a user that the JPEG compression implementation on their particular phone with their particular photograph has a unique on-the-wire transfer size that may already be enough to correlate them with their recipient? etc