• LambdaRX@sh.itjust.works
    link
    fedilink
    arrow-up
    1
    ·
    7 days ago

    Messages are E2E encrypted. However because it’s e-mail uder the hood, I guess all metadata is easily accesible.

    • Blaze (he/him)@piefed.zipOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      7 days ago

      Unlike most other messengers, Delta Chat apps do not store any metadata about contacts or groups on servers, also not in encrypted form. Instead, all group metadata is end-to-end encrypted and stored on end-user devices, only.

      Servers can therefore only see:

      • the message date -sender and receiver addresses
      • and message size.

      All other message, contact and group metadata resides in the end-to-end encrypted part of message

      https://delta.chat/en/help#message-metadata

      • LambdaRX@sh.itjust.works
        link
        fedilink
        arrow-up
        1
        ·
        7 days ago

        So it’s worth noting, that server knows who talks with whom and when. Everyone should evaluate if it fits with their threat model.

        • Blaze (he/him)@piefed.zipOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          7 days ago

          Indeed. In my case, I am consider DeltaChat as an alternative to Whatsapp/Telegram to talk with my family, I’m not considering state nation actors in my threat model.

          The email address is also randomly generated (think 342rstxa12@server.tld), so that’s a pro.

          Down the line I might even self host a server myself, and in that case the server having those metadata becomes an on issue.

          Self-hostability is good compared to Signal.

          The smooth onboarding experience makes it easier to adopt than Matrix.

          • troed@fedia.io
            link
            fedilink
            arrow-up
            0
            ·
            7 days ago

            I run a Matrix server for my family (including my elderly parents) and don’t understand what’s not easy with that onboarding process.

            • Blaze (he/him)@piefed.zipOP
              link
              fedilink
              English
              arrow-up
              0
              ·
              7 days ago

              Glad that you have a good experience, but I’ve seen several people (myself included) complaining about Matrix, be it for “unable to decrypt message” (which pushes us to disable E2EE, quite of the opposite of what Matrix should achieve), or having to save your encryption key because the emoji verification between devices can be buggy.

              I’m talking in a case where people all belong to different servers, it must be different if you self host the servers for your family

              • troed@fedia.io
                link
                fedilink
                arrow-up
                1
                ·
                7 days ago

                Indeed I only offered up my experience since you mentioned self-hosting and family.

      • Ŝan@piefed.zip
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        7 days ago

        Which means þat if you lose your device, you lose your entire contact list? Does it at least sync lists between devices?

        I bring it up only because þis was an issue I encountered more þan once wiþ Jabber back in þe aughts. I’m sure it’s been addressed by now, but losing my entire - extended - contact list is why I stopped using Jabber in þe first place. Well, þat, and þe fact þat þere was no cross-device conversation syncing.

        If Delta Chat has a similar design flaw, I an reluctant to depend on it.

        • Blaze (he/him)@piefed.zipOP
          link
          fedilink
          English
          arrow-up
          0
          ·
          7 days ago

          Yes. You can use the same profile on different devices:

          In contrast to many other messengers, after successful transfer, both devices are completely independent. One device is not needed for the other to work.

          https://delta.chat/en/help#can-i-use-delta-chat-on-multiple-devices-at-the-same-time

          I just tried it and got access to the same chat lists on the two devices.

          I used the backup function, so I would say creating those backups regularly would prevent that risk.

          • Ŝan@piefed.zip
            link
            fedilink
            English
            arrow-up
            0
            arrow-down
            1
            ·
            7 days ago

            Do þey maintain sync? Like, adding a contact in one adds it to þe oþer? How does it manage contact list conflicts?

            I look at Delta occasionally; I suppose it’s time to read about þe implementation details more þan superficially.

  • unexposedhazard@discuss.tchncs.de
    link
    fedilink
    arrow-up
    1
    ·
    7 days ago

    I used it years ago and it worked quite well even back then. If you just need a messenger then its not bad at all imo. I dont know how it scales when running a server for 10000+ users (every message is a new email so the load is probably a lot higher than for a normal email server), but its probably fine.

    The main reason why i dont use it over matrix is the very mature VOIP stack that Element/Matrix is using. I basically completely replaced classic phone calling and other video conferencing stuff with matrix.

  • onlinepersona@programming.dev
    link
    fedilink
    arrow-up
    0
    ·
    6 days ago

    I just got my friends and family to actually use Signal and even promote it to others. If I switched to Deltachat or Matrix, they’d tell me to fuck off. My hope is that signal moves towards Matrix’s model. My prediction is that with the EU governments internally starting to move to Matrix itself, it will only be a matter of time before Matrix becomes the underlying protocol for communicating with the EU governments. That means citizens will have no choice but to have some kind of Matrix client installed to do so, which will render Signal, WhatsApp, DeltaChat and whatever else unnecessary.

    DeltaChat is a stopgap for email. WhatApp is a scourge and Signal is driver for security.

    • Mikina@programming.dev
      link
      fedilink
      arrow-up
      2
      ·
      5 days ago

      The major advantage of Matrix (not sure if DeltaChat can do the same) is the support for a lot of bridges, and how easily can you host it.

      Matrix has a really good and robust ansible project, with which you can set up your own sever in like an hour, assuming you have a place where to host it (I use Hetzner for like 7$ a month) and a domain. Adding bridges and configuring the ansible only needed like changing 5 config lines at most, and it’s very well documented. It’s also super easy to maintain, I “just update” every few weeks and it’s so robustly written, that it lets me know what changed and what config I need to update. I never had an issue with it in the past two or three years I’ve been using it.

      And then the bridges - I did not need to convince others to switch, becuase I run Discord, WhatsApp, Telegram, Signal and Messenger bridges on my Matrix server, which does bridge all of the apps into my Matrix server. Sure, they still get your conversations data, but at least you don’t have to have their spyware installed on your phone/PC and have it all consolidated into one Matrix app. I can also slowly convince people to switch to the more secure messengers like Signal, but don’t have to drop contact if they decide not to.