@kuketzblog für den Fall dass der Aufbruch der Verschlüsselung erzwungen wird bei zentralisierten Diensten wäre eine extra Kategorie/Einschätzung interessant. Threema(nicht eu) vs dezentral..

@kuketzblog #Briar - serverbasierte Messenger sind in der aktuellen Lage #Trump grundsätzlich nicht mehr sicher.

@xoron I don't want to discourage you at all - in fact I think your goal is not just noble but also worth aspiring to.

• My recommendation is always to scout out existing solutions, protocols and standards and see if those can be salvaged / used and if not, reason why. #PGP/MIME may seem crusty but a good UI can make it easy. Same.goes for #OMEMO & #OTR...

But whatever you do, please "DO NOT DIY ENCRYPTION!"

• Instead delegate it to drop-in libraries (i.e. crypto++ for C++) that are well, maintained and getting audited.

Prioritize features early on and make a decision what you want and if/how these can be accomplished. If necessary, have different modes / functions one has to context-switch (i.e. videocalling can't work in an airgapped network unless your callers are in the same (W)LAN).

• If possible choose to stay platform-independent in terms of tech, so like #WebCall, #JitsiMeet, etc. you can simply package that up with nw.js... (Except if you need like a minimalist, (n)curses-style TUI tool like #enc)

User-test early on. Espechally with "#TechIlliterates", if you can.

• Focus on a #MVP (minimum viable product) early on.

Write #documentation early on since that'll remove headaches. And I don't just mean #CommentYourCode but go deep and explain in detail why you chose something. This will help not just you.

• In terms of "scouting existing solutions" I'd recommend to take a look not just at #JitsiMeet & #WebCall, but also #Briar, #ServalMesh, @monocles / #monoclesChat, @gajim / #gajim and @micahflee's #OnionShare.

Make yourself a list what you like and dislike from those.

• Same with #Linphone, @zulip / #Zulip, #WhatsApp, #Signal, #Threema and even #WeChat, #FacebookMessenger, #iMessage, #FaceTime and god forbid #Skype, #MicrosoftTeams as well as #Slack.

Don't be afraid if your #App can't tick all the boxes at first release. Rather feel free to slowly ibtegrate them.

Needless to say I do sincerely wish you good luck and only the best in terms of success.

@teajaygrey @halva @lynn @signalapp @deilann @monocles @Mer__edith @torproject

I remember #SLIC but sadly it never got traction.

• Needless to say #XMPP with #OMEMO & #PGP/MIME nowadays has excellent support by clients for every relevant platform and there are various other options depending on the use case, threat model and scenario.

I do gladly advice clients/employers directly...

• So far only #Tor and #Monero have reached a level of #decentralization that makes it basically impossible to shut them down even if (key) people working on it were to be arrested/forcibly disappeared/murdered (as had been the case!), with #SelfHosting-capable projects being close behind.

For example, #Briar as a "#airgapped" (or rather '#offline-capable') messenger may be the hottest thing if one needs to #chat with someone stuck exactly in the middle of North Korea and out of reach for Chinese, Russian or South Korean phone networks, tho that still relies on the local #SneakerNet (or rather #TrampingNet) to facilitate the transfer, which is rather common given the fact that #USB #flashdrives and #microSD cards are smuggled there en masse...

@solstice @FediThing @copdeb @magicalmilly @briar Yeah, #Briar AFAICT is one of the few #offline-capable & decentralized options.

• Besides that, use #XMPP + #OMEMO and consider having someone overseas to host stuff for you securely over Tor...

But as we all know: An #App won't fix #ITsec, #InfoSec, #OpSec & #ComSec!

People STOP using #Telegram!!!!
Alternatives:
(Matrix is more like what Telegram is supposed to be but decentralized)https://matrix.org/
(I feel Session Messenger is one of the top 2, read about it)https://getsession.org/
(SimpleX Chat is decentralized, end-to-end encrypted & can easily hook into Tor)https://simplex.chat/
(Briar Project is cool for many reasons & Tor is baked in but it still needs a lot of work)https://briarproject.org/
#Matrix #Session #SimpleXChat #BriarProject #Briar

@evacide may I suggest #Briar a secure, p2p messenger. Can use internet, local WiFi, direct wifi, even Bluetooth. All data held on local devices, not on servers.
Download Briar at https://briarproject.org/download/

@digitalcourage #Briar oder #Matrix ?
Matrix: https://matrix.org/
Matrix Client: https://element.io/
Briar: https://briarproject.org/