Conversation

Notices

1. Embed this notice
   Alex Gleason (alex@gleasonator.com)'s status on Tuesday, 29-Nov-2022 16:35:38 JST Alex Gleason

   • @polarisera reposted your post

   @silverpill @polarisera The Matrix route would work, but it’s complicated (YEARS of work to perfect) and the UX still isn’t perfect.

   • Embed this notice
     JC Brand (jcbrand@mastodon.xyz)'s status on Tuesday, 29-Nov-2022 17:14:47 JST JC Brand

     in reply to

     • @polarisera reposted your post

     @alex @silverpill @polarisera

     I added libsignal based E2EE for Converse.js, a web XMPP client.

     Every tab is definitely not a new device. The browser itself is however a device.

     The Signal desktop app is also basically a web-app wrapped in Electron.

     The main issue with E2EE over a website is that served JavaScript can't be signed and verified and the code can change at any time. But Electron apps also self-update, so ?♂️

     If the code is 100% FOSS and you self-host, it's much less of an issue

     Alex Gleason likes this.