Will this make end-to-end encryption finally get the polish it needs?
Within Riot, polishing e2e is already top of our priority list, but yes it definitely doesn’t harm having high profile entities like this expecting it.
Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
41–50 of 204 posts
Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#42Earlier quoted context omitted.
curl? O:-) Matrix is intended to be simple enough that you don’t even need an SDK unless you really want one. which java sdk did you try?
thanks, I thought it was a bit more complicated with session ids etc, will look at keeping it simple again. I used the Java SDK from Kamax that was on https://matrix.org/docs/projects/try-matrix-now.html . would be nice if there are others. I'm excited about it though - is just what I've been looking for.
I am the author of the SDK - feel free to open an issue on the github repo or come in the dedicated Matrix room #matrix-java-sdk:kamax.io and we'll get you started.
Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#43Do the French make their own hardware? An encryption app is useless if you don't 100% trust the hardware. Tainted hardware could figure out, log and send your keystrokes from screen taps/swipes all from silicon.
You aren't wrong, but most people's threat model doesn't include defense against state-level actors — because for most people there isn't a defense against state-level actors.
Apparently, though, people whose threat model isn't dialed up to 11 don't deserve security or privacy?
Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#44Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#45Never heard of Matrix... looked it up; gross... python2.7
Also take a look at the network "protocol": JSON over HTTP longpolling, requiring usually a separate socket for each batch of messages sent or received (unless HTTP/2 is available, then it’s a bit less expensive, still has a massive overhead). Matrix has so much potential – someday, when it’s built on technologically more ideal foundations. Python2.7 you’ll barely notice, but the network overhead of the Matrix protoc…
The spec only states the use of JSON over HTTP as a baseline so anyone is welcome to implement more efficient transports like CBOR/COAP or MQTT or whatever :)
But yes the goal of the reference implementations was to showcase the simplest transport: one PUT to send and one GET to retrieve it.
Meanwhile we’re working on improving the performance of the servers with some rather nice breakthroughs on the horizon.
Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#46Don’t suppose anyone knows why the Signal protocol wasn’t chosen?
Because Signal is centralized. With Matrix they can deploy different servers across the gouvernement which interoperate. And potentially open it to the wider Matrix ecosystem
Signal, the service is centralized, but there's no reason that Signal, the protocol can't be. In fact before Moxie went on his silly "only I can do security right" rampage, Signal was federated with a server hosted by CyanogenMod.
Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#47I don't know much about licenses: is Matrix and/or the protocol safe from Facebook, Google and co to pull the same thing again? Feels like EEE is inevitable when these companies allocate resources to provide a better UI/UX and benefits in their own services.
Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#48Earlier quoted context omitted.
What do you mean ?
If progressively more governmental communications are made through encrypted means, we cannot access them as citizens.
You're not supposed to be able to access any and every government communication. You're not supposed to know what the nuke codes are, or when there's an undercover mission in progress, or [insert punchline here].
Presumably, if there's an investigation, they just force the government employee to give up the keys.
Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#49Earlier quoted context omitted.
thanks, I thought it was a bit more complicated with session ids etc, will look at keeping it simple again. I used the Java SDK from Kamax that was on https://matrix.org/docs/projects/try-matrix-now.html . would be nice if there are others. I'm excited about it though - is just what I've been looking for.
I am the author of the SDK - feel free to open an issue on the github repo or come in the dedicated Matrix room #matrix-java-sdk:kamax.io and we'll get you started.
Wow thanks, will check. I had trouble with gradle build, I think because was latest version with intellij.
Re: Matrix and Riot Confirmed as the Basis for France’s Secure Instant Messenger App
#50Earlier quoted context omitted.
thanks, I thought it was a bit more complicated with session ids etc, will look at keeping it simple again. I used the Java SDK from Kamax that was on https://matrix.org/docs/projects/try-matrix-now.html . would be nice if there are others. I'm excited about it though - is just what I've been looking for.
I am the author of the SDK - feel free to open an issue on the github repo or come in the dedicated Matrix room #matrix-java-sdk:kamax.io and we'll get you started.
All my upvotes to the both of you for your responsiveness. Keep up the good work!