User avatar
luna the doggie neofox_snug therian @lunareclipse@snug.moe
6mo
I guess Soatok has a point about XMPP, the market penetration of OMEMO updates is essentially non-existent.

Signal solves this problem by not letting you use app builds older than 3 months, idk how you'd solve it for XMPP.
This note is quoting snug.moe/notes/aj28cukmccn66j3x
3
0
0
0
User avatar
walnut 🌱 @walnut@thesoftestpaws.net
6mo
@lunareclipse
having high quality libraries with bindings for multiple languages would help as that's a major obstacle. most clients use an old version of libsignal before they rewrote it in rust
1
0
1
0
User avatar
walnut 🌱 @walnut@thesoftestpaws.net
6mo
@lunareclipse
I should note there are not any known vulnerabilities in the old version implemented by clients, but there are still things that aren't great, like unencrypted reactions and metadata (this message edits that message id, or is a reply to that message id. the contents are still encrypted)

The invisible salamander problem may be possible, not sure, but being able to send messages that decrypt to different things is also possible by any server admin in a group chat, because the server can send different ciphertexts to different people. At least as far as I can tell.
0
0
1
0