Raphael Robert / is on Nostr

Privacy, security, messaging at @phoenix_r_d. #MessagingLayerSecurity co-author. 🦀. He/him.

Last Notes

2024-09-18 09:59:35

🔐 Discord introduces end-to-end encryption with Messaging Layer Security (MLS) 🔐
Im really happy to see another large scale MLS deployment. It shows the technology is fit for purpose.
Discord uses MLS for key negotiation in group calls with really fine-grained Forward Secrecy and Post-Compromise Security: A new member of the group cannot decrypt any media sent in the previous epochs, and a leaving member of the group cannot decrypt any media sent in future epochs.
https://discord.com/blog/meet-dave-e2ee-for-audio-video

2024-03-05 00:24:53

It’s the end of an era, Signal will now respond to subpoenas and hand over phone numbers when given usernames. I’ve seen first hand how this worked with Wire. Subpoenas come in in high numbers and you can’t fight them all.
The only advantage Signal has over Wire is that usernames are not necessarily visible to contacts. But the problem is still there.
https://theintercept.com/2024/03/04/signal-app-username-phone-number-privacy/

2024-03-05 00:24:53

2023-12-07 09:47:22

Let's make this crystal clear: If you think you are anonymous because you
- used a throwaway number for Signal
- picked a completely random username for Wire/Matrix
- were given a random username with Threema/Session
YOU ARE NOT! You can be identified by the push tokens that are registered with each messenger operator.
https://chaos.social/@andre_meister/111538429318672330

2023-04-25 09:24:25

I had the pleasure to be invited by the fine folks of the Security. Cryptography. Whatever. Podcast.
I was asked great questions about MLS and we had a good discussion for about an hour.
The result is a meandrous walk through the secure messaging landscape.
[https://securitycryptographywhatever.com/2023/04/22/mls](https://securitycryptographywhatever.com/2023/04/22/mls)