Clicky

(tap for home) also see; posts archive, top of my stack

About Digital Communication Platforms

I like obtaining security and privacy on the services that I use, and I always favor those being a design rather than trust, so I prefer to have the server I’m using can not see my texts or chats by design rather than by trusting their claimed policies.

Platforms

Following table shows my level of trust (based on the design) of some of the most common services today.

Platform Usability Elaboration
Emails Very low. See Emails and Privacy.
The IRC internt protocol Very low. Centralized by design without any encryption scheme, even in the case of trusting the service provider, it’s easy to mess with it by using even another centralized server to save the log by being connected to the server all the time (tildeverse irc network is an example). The protocol does not allow CR and/or LF in its message. No images.
Facebook Very low. Additionally to the same reasons that are included with Telegram, Facebook doesn’t even bother telling us about encryption being a thing in their servers. Moreover, facebook is compulsory obligated to reveal any “messages, photos, and other information stored on the platform.” under warrants or subpoenas.
Skype, Viber, Discord, Google Chat, Hangouts, Slack and LINE Very low. Same as facebook.
Telegram Low. Telegram claim that they have “disclosed 0 bytes of user data to third parties”. They also claim that there is a kind of encryption scheme in their servers which is not verifiable of course because they are running proprietary systems; and even if that’s true, the E2EE feature is not enabled by default, which means that it is possible for the telegram admins to monitor over some users chats by compiling the allegedly-distrusted encryption keys.
Signal Preferable. E2EE by default, strict with subpoenas, only able to store metadata. The only issue I’ve got with them so far is that their clients are not very well-crafted. Since E2EE is everywhere, it’s much harder to mess with it and suitable for non technical users.
Matrix Preferable. Same as Signal. Some rooms are not E2EE. Federated by design (you can run your own instance/server and communicate with other servers, or ask your friend to sign up with yours, this way no one can collect your metadata). Read more about how the Matrix works
XMPP Preferable Same as previous, and it’s really decentralized not like Matrix Matrix is federated by design, however the vast majority of people are using the Matrix.org server, which makes federation pointless.
     

Why Even Bother?

I have encountered numerous instances where individuals perceive my preference for utilizing private and encrypted means of communication (E2EE) as suspicious. Some even question the rationale behind such measures, expressing a lack of concern regarding their own chat privacy. However, both of these assertions are fundamentally flawed, as privacy holds inherent value for everyone. Consider the unsettling scenario of one’s conversations being leaked or the prospect of someone having unrestricted access to your entire chat history with any individual (which already applies if you are using any of the means that labeled with low above.). The implications are undeniably disconcerting. It is imperative to recognize the essentiality of privacy, even if its significance may not be immediately apparent.

The notion that having “nothing important to worry about” implies a fulfilling existence is a misguided perspective. This mindset reflects a certain hollowness within one’s life that warrants introspection and addressing. Rather than solely contemplating the importance of private communication, it would be better to focus on nurturing a more meaningful and purposeful existence rather than communication means if you have such claims like “I’ve nothing to worry about on my chats”. If one’s communications lack any substance worth safeguarding, it may indicate a lack of genuine connections or a failure to engage in authentic experiences, which merits attention and cultivation.

Important Note

There is no point of using a secure messaging platform if you are going to use it on an insecure browser or operating system (like googled chromium, edge, other proprietary browsers and OSs including Windows and OSX).

Comments:

Antar on 02, Jun 23 — 02:29: Using privacy aware messaging protocols not only protect oneself against potential information outbreaks, but they also hinder the orwellian efforts put in place by big tech and governments to target people with ads or watch over their day to day life and returns control to the user

Footnotes:

1

Matrix is federated by design, however the vast majority of people are using the Matrix.org server, which makes federation pointless.

I seek refuge in God, from Satan the rejected. Generated by: Emacs 29.4 (Org mode 9.6.17). Written by: Salih Muhammed, by the date of: 2023-06-02 Fri 00:15. Last build date: 2024-07-04 Thu 21:55.