@treefit @desirable_dialogue @uhuru @dino @kaidan

> #DeltaChat has no forward secrecy.

True, but forward secrecy is only useful if you use disappearing messages. Because if your messages don't disappear, they'll just read the chat history right off your confiscated device.

There is a PFS implementation that has been sketched out and seems solid, but hasn't been tested yet.

> And depended on SHA-1 and using MD5.

DeltaChat uses the same ed25519-dalek Rust crate as Signal and relies on AES-128 for the session keys. When the PQC standard is finalized this summer it will roll out PQC crypto and bump to AES-256. The hash is SHA256.

You could just read the source code instead of making things up or regurgitating PGP information from the late 1990s.

https://github.com/chatmail/core/blob/47b9bfc8bf807ad099d2211a59d6ba80290b0c95/src/pgp.rs#L28-L31