Conversation

note: we are not outlining our security precautions as a brag but because our users have asked what steps we take security wise (that we can discuss publicly).

big fuckups happen. simple mistakes happen. both can snowball quickly. no guarantees about encryption are absolute. we want as little information as is feasible about our users.

what happened at kolektiva was a big fuckup, but no one is immune to making one of those, ourselves especially. anyone claiming otherwise is deceiving themselves and their users.

likewise services that claim that things can be made perfectly secure (glares at proton mail) are lying to you. it is impossible to make something like email secure.

Mastodon et al ARE NOT SECURE. don't act like they are or can ever be.

Signal or XMPP with OMEMO (which we hope to have available soon) are the best we've got.