mastodon-e2ee-specification
libsignal
| mastodon-e2ee-specification | libsignal | |
|---|---|---|
| 11 | 24 | |
| 195 | 2,904 | |
| - | 1.7% | |
| 10.0 | 9.8 | |
| over 1 year ago | 6 days ago | |
| Rust | ||
| GNU Affero General Public License v3.0 | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
mastodon-e2ee-specification
-
The Apes Shitstorm Shelter (ASS) - the censorship state of reddit and subreddits - Part 2
No end to end encryption in mastodon: https://github.com/soatok/mastodon-e2ee-specification
- Mozilla’s setting up shop on Mastodon and trying to reinvent content moderation
- Discussion Thread
- Is that all you need?
-
Towards End-to-End Encryption for Direct Messages in the Fediverse
What Moxie wrote was about his decisions with Signal. It's not that relevant to this post for distinct two reasons:
1. One of the stated anti-tenets of what I'm proposing is competing with Signal. https://github.com/soatok/mastodon-e2ee-specification#anti-t...
2. Cryptography has matured greatly since Moxie wrote that post.
I feel confident about rolling out a v1 E2EE protocol for the Fediverse in 2023, and then a v2 in 2024 or later.
Migration is a two-putt, but it's tractable. I've worked on similar message format migrations before.
1. Roll out read-only support for v2.
2. Enable writing. Now people can start using v2.
3. Later, once the new version is ubiquitous for the scope of your concern, disable v1.
It's not as fast as if you own the whole stack (like Signal does).
-
AMA with Eugen Rochko, Founder and lead developer of Mastodon, a decentralized, open-source social media platform based on open web protocols. Ask your questions here!
This is a very hard problem to solve. I know it's being worked on by some smart people though, see https://soatok.blog/2022/11/22/towards-end-to-end-encryption-for-direct-messages-in-the-fediverse/
-
End-to-end encrypted messages need more than libsignal
Related: https://soatok.blog/2022/11/22/towards-end-to-end-encryption...
-
tankies mad about sites that actually have ToS
The good news is that because Mastodon is open source, and development is done in the open, anyone with the needed skills and interest could implement it right, and there is a project spearheaded by cryptography experts to do just that. https://github.com/soatok/mastodon-e2ee-specification
libsignal
- Police used Cellebrite to break into my phone, how do I prevent this in the future?
- EU haluaa kieltää vahvan salauksen - vaatii takaportteja viestisovelluksiin
- Signal has begun it's transition towards post-quantum key exchanges
-
libsignal-go built for go1.20+
I am in the process of building a Go implementation of the libsignal-protocol, which powers the Signal app.
-
End-to-end encrypted messages need more than libsignal
How is twitter intending to use libsignal? I doubt it would be via the primary AGPL license[1], forcing them to publish the source code of their server source code. Does signal sell private licenses?
[1] https://github.com/signalapp/libsignal/blob/main/LICENSE
-
Twitter Will Adopt Signal Protocol for Encrypted DMs
The Signal Protocol is licensed under AGPLv3 (see here).
Signal protocol is AGPL3 https://github.com/signalapp/libsignal
- Twitter to Encrypt Direct Messages Using Signal Protocol, Shows Code
- Elon Musk says he wants 'Twitter 2.0' to have video chat, voice calls, and encrypted DMs — and has enlisted the help of Signal's founder
-
Snap Store administrators removed signal-desktop from Ubuntu Snap
This is the license for libsignal: https://github.com/signalapp/libsignal/blob/main/LICENSE
The only reference to trademark is:
> Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms:
What are some alternatives?
mastodon - A glitchy but lovable microblogging server
signal-cli - signal-cli provides an unofficial commandline, JSON-RPC and dbus interface for the Signal messenger.
GpgFrontend - A free, open-source, robust yet user-friendly, compact and cross-platform tool for OpenPGP encryption. It stands out as an exceptional GUI frontend for the modern GnuPG (gpg).
axolotl - A Signal compatible cross plattform client written in Go, Rust and Vuejs
mls-architecture - MLS architecture
Signal-Desktop - A private messenger for Windows, macOS, and Linux.
user_pinger_2 - Bot + accessory services for pinging groups on a subreddit
status-mobile - a free (libre) open source, mobile OS for Ethereum
joinmastodon - The official Mastodon project homepage
openpgpjs - OpenPGP implementation for JavaScript
mastodon-block-tools - An attempt to list as many different projects/tools/scripts related to Mastodon & fediverse block management as possible
nimbus-eth2 - Nim implementation of the Ethereum Beacon Chain