this post was submitted on 16 Sep 2021
18 points (90.9% liked)

Asklemmy

43399 readers
1009 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago
MODERATORS
 

I think XMPP.

you are viewing a single comment's thread
view the rest of the comments
[–] ancom@lemmy.ml 1 points 3 years ago

You can either make e2ee easy to use and enable it by default, or you can try to make people understand what they are doing to protect them from edge cases. Conversations does the former, while not making the latter impossible.

...the "edge case" that e2ee should protect from third parties such as an admin to read the messages. A new key could create a pop up window that informs the user. If user doesn't care, there can be an option for "never show again". Having a function that says "verify key", should also be expected from an app that argues to have secure e2ee implementation.

as most people don’t really need strong e2ee anyways.

Most people don't need any. It's infosec larping what people do. And then software developers build software for LARPing.