Is there any actual easy to use foss chat app my friends and SO could use ? Everyone uses fb messenger because its so easy. I cant find anything easy enough to make people switch to, that won't have issues and send them running back to zucc

you are viewing a single comment's thread
view the rest of the comments

[–] WilliamA@lemmy.ml 2 points 1 day ago* (last edited 1 day ago) (1 children)

There is a new chat app called session. Me and my friend migrated from signal to it due to the better privacy. Check it out. It's basically just libre messanger.

[–] int32@lemmy.dbzer0.com 5 points 1 day ago* (last edited 7 hours ago) (2 children)

check out https://soatok.blog/2025/01/14/dont-use-session-signal-fork/ and https://soatok.blog/2025/01/20/session-round-2/ . session doesn't even have PFS(perfect forward secrecy), which can be very useful, so if a key is cracked, then only a few messages can be decrypted. EDIT: that was a lot of typos!

[–] WilliamA@lemmy.ml 1 points 15 hours ago (1 children)

Thanks. Yk a secure replacement?

[–] int32@lemmy.dbzer0.com 1 points 7 hours ago* (last edited 7 hours ago)

I like XMPP, but there's also LXMF(a bit more experimental, only for 'advanced' users) or simply signal or simplex.

[–] blurb@sh.itjust.works 5 points 1 day ago* (last edited 1 day ago) (1 children)

I would also use Signal instead, but Session's situation is not that bad unless one needs to accommodate the CIA or Mossad as part of their threat model, in which case I think SimpleX would be a better option. This is also in the article you posted:

Edit: I didn't notice that the original commenter had said they "switched from Signal" at first, which is definitely worse.

[–] crash_thepose@lemmy.ml 1 points 1 day ago (1 children)

Why would simplex be better in that case?

[–] blurb@sh.itjust.works 3 points 1 day ago (1 children)

The lack of PFS and 256bit encryption in Session is a little concerning, and one other advantage of SimpleX is that it has no unique identifiers at all while Session uses random IDs and Signal requires a phone number.

[–] crash_thepose@lemmy.ml 2 points 1 day ago (1 children)

I thought signal doesn't require a phone number anymore ?

[–] blurb@sh.itjust.works 4 points 1 day ago

It still does, but they did add a username system so you don't need someone's phone number to contact them.