skiff-apps VS simplex-chat

Github: The Skiff CEO appears to be coding most of this and doesn't really have much of an idea when things go wrong. An example of this is a recent issue with the favicon supporting dynamic updates to show unread emails (https://github.com/skiff-org/skiff-apps/pull/156) replies such as "So we need to somehow remove these?" doesn't fill me with confidence in the code behind Skiff and why a lot of issues never get fixed and is just hacked together and hope for the best.

Skiff

Hello, I want to assign custom domain addresses to e.g. family members. Shall the family member create already a skiff.com account, and then I assign a custom domain address to him?

Hi! I've very recently learnt of Skiff from Epic Murphy's new video on private email services. I wanted to try out the service, however, I get certificate error on any browser I try, both on my desktop and on my phone, whenever I go to skiff.com or any of the subdomains of the website. On my desktop, I've tried the website on Librewolf (Firefox fork), vanilla Firefox and Ungoogled Chromium. On my Android phone, I've tried the website on vanilla Brave. My desktop OS is Arch Linux and my phone OS is Android 13. I will attach some screenshots of the error from my desktop.

[2] https://github.com/skiff-org/skiff-apps/issues/94

skiff.com can use your custom domain for free, and if you are max 5 people you can all have an address in the custom domain. That takes care of emails. And Skiff also has Calendar, Drive and Pages, but they are all a bit lacking when you're used to Google Drive stuff.

For messaging I'm currently on Olvid (E2E with physical key exchange) but since it still use their servers, I'm currently testing SimpleX where I can host my own servers.

Notice how SimpleX (https://simplex.chat/) has no push notifications by default because of this issue.

I've been using SimpleX [0] with a couple of friends recently. It appears to work as advertised.

[0] https://simplex.chat

If you have a mobile phone number, the domestic intelligence agency knows exactly where you are at all times and any LEO (without a warrant) can also find you. In addition, there have been numerous CCC presentations showing how insecure the global (excluding US) and (separately) US carriers are guilty of promiscuous metadata trafficking ($$) and insecure SS7 setups. As a consequence, for low $, you can go to any one of several shady websites and find the last location of almost any phone number (person unique ID) globally. There are additional varying exploitable vulnerabilities depending on the exact combination of {handset x carrier x country} to impersonate them, tap their line, reveal their exact location, and redirect their phone number through a third-party handset or even a PBX. These are more expensive and some capabilities are forbidden for all but a few selective intelligence uses.

Session (Signal fork) doesn't use phone numbers. It's pretty well-designed overall and uses an onion routing approach. It's already a superset of Signal except it doesn't use phone numbers. https://getsession.org

Also look interesting:

* (unproven) https://www.olvid.io/technology

* (unproven) https://simplex.chat

PS: Using regular TOR on home broadband or cloud servers is relatively risky and inefficient. Sybil attacks on it are common. And to network operators and security agencies it gives an easy "flow tag" of your uplink and exit node data traffic as automatically suspicious.

Why not open up a Feature request on https://github.com/simplex-chat/simplex-chat/issues