How save is XMPP really?
How save is XMPP really?
Ok so, here I am again asking another question 🙈🙊 But hear me out: I read this post here about, if there even is a good privacy messenger that can be trusted. Someone in the comments mentioned Conversations (a XMPP client for Android). This made me look into XMPP and at the moment I am giving Conversations a try. Reading into XMPP, I couldn't find a problem security or privacy wise. Also it seems like it does not matter what server I use (atm. we are on 07f.de) since it is all e2e with OMEMO. Am I missing something or is it really this good? And if I dont trust anyone, I could host my one instance of ejabberd, right?
You're viewing a single thread.
its really really save
Edit: sorry I misread it as XMR.
XMPP can be very unsafe. It depends on the client you use. Its best to use a protocol that doesn't allow unencrypted messages to be sent at all. Like Wire or Signal.
Kinda depends on your threat model too, like if you don't want your traffic going through the US signal is gonna be a big no no.
Its best to use a protocol that doesn't allow unencrypted messages
This is an implementation thing and not a protocol thing. What protocol doesn't allow unencrypted messages? I am sure signal's protocol would still allow it, it's just that the implementation doesn't.
And same for XMPP. Just go with the implementation that doesn't.
Simplex.chat is the current best one AFAIK
If I understand correctly, you can prohibit non-e2e messages on your server .