• Blaze (he/him)@piefed.zipOP
    link
    fedilink
    English
    arrow-up
    1
    ·
    7 days ago

    Unlike most other messengers, Delta Chat apps do not store any metadata about contacts or groups on servers, also not in encrypted form. Instead, all group metadata is end-to-end encrypted and stored on end-user devices, only.

    Servers can therefore only see:

    • the message date -sender and receiver addresses
    • and message size.

    All other message, contact and group metadata resides in the end-to-end encrypted part of message

    https://delta.chat/en/help#message-metadata

    • LambdaRX@sh.itjust.works
      link
      fedilink
      arrow-up
      1
      ·
      7 days ago

      So it’s worth noting, that server knows who talks with whom and when. Everyone should evaluate if it fits with their threat model.

      • Blaze (he/him)@piefed.zipOP
        link
        fedilink
        English
        arrow-up
        1
        ·
        7 days ago

        Indeed. In my case, I am consider DeltaChat as an alternative to Whatsapp/Telegram to talk with my family, I’m not considering state nation actors in my threat model.

        The email address is also randomly generated (think 342rstxa12@server.tld), so that’s a pro.

        Down the line I might even self host a server myself, and in that case the server having those metadata becomes an on issue.

        Self-hostability is good compared to Signal.

        The smooth onboarding experience makes it easier to adopt than Matrix.

        • troed@fedia.io
          link
          fedilink
          arrow-up
          0
          ·
          7 days ago

          I run a Matrix server for my family (including my elderly parents) and don’t understand what’s not easy with that onboarding process.

          • Blaze (he/him)@piefed.zipOP
            link
            fedilink
            English
            arrow-up
            0
            ·
            7 days ago

            Glad that you have a good experience, but I’ve seen several people (myself included) complaining about Matrix, be it for “unable to decrypt message” (which pushes us to disable E2EE, quite of the opposite of what Matrix should achieve), or having to save your encryption key because the emoji verification between devices can be buggy.

            I’m talking in a case where people all belong to different servers, it must be different if you self host the servers for your family

            • troed@fedia.io
              link
              fedilink
              arrow-up
              1
              ·
              7 days ago

              Indeed I only offered up my experience since you mentioned self-hosting and family.

    • Ŝan@piefed.zip
      link
      fedilink
      English
      arrow-up
      0
      arrow-down
      1
      ·
      7 days ago

      Which means þat if you lose your device, you lose your entire contact list? Does it at least sync lists between devices?

      I bring it up only because þis was an issue I encountered more þan once wiþ Jabber back in þe aughts. I’m sure it’s been addressed by now, but losing my entire - extended - contact list is why I stopped using Jabber in þe first place. Well, þat, and þe fact þat þere was no cross-device conversation syncing.

      If Delta Chat has a similar design flaw, I an reluctant to depend on it.

      • Blaze (he/him)@piefed.zipOP
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 days ago

        Yes. You can use the same profile on different devices:

        In contrast to many other messengers, after successful transfer, both devices are completely independent. One device is not needed for the other to work.

        https://delta.chat/en/help#can-i-use-delta-chat-on-multiple-devices-at-the-same-time

        I just tried it and got access to the same chat lists on the two devices.

        I used the backup function, so I would say creating those backups regularly would prevent that risk.

        • Ŝan@piefed.zip
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          7 days ago

          Do þey maintain sync? Like, adding a contact in one adds it to þe oþer? How does it manage contact list conflicts?

          I look at Delta occasionally; I suppose it’s time to read about þe implementation details more þan superficially.