ArcaneChat Forum

148 readers

1 users here now

Private chats for the family 🥳

ArcaneChat is a private and secure messenger focused on privacy and friendly user experience.

ArcaneChat is a Delta Chat client and it is compatible with other Delta Chat clients.

WARNING: if you are reading this in the fediverse, this is not an official communications account of ArcaneChat project but a Lemmy community/forum

founded 1 year ago

MODERATORS

adbenitez@lemmy.ml

I have a question for the #DeltaChat crowd: What if someone has a quick access to one of my devices, let's say I forget to lock my phone or laptop and an attacker adds their phone as a secondary (eldritch.cafe)

submitted 5 days ago by lou_de_sel@eldritch.cafe to c/ArcaneChat@lemmy.ml

13 comments fedilink hide all child comments

Cc @delta @ArcaneChat

you are viewing a single comment's thread
view the rest of the comments

[–] INeedMana@piefed.zip 1 points 5 days ago (1 children)

Maybe I'm missing some detail on how DC works but you have to have an account in order to get your messages. Even in Arcane, which is aimed at being more non-technical-friendly, you can see your login and password in the "relays" settings

[–] rakoo@blah.rako.space 1 points 5 days ago (1 children)

@ineedmana

At this point it becomes technical jargon but "account" kinda implies storing settings, profile, and such. A relay address has none of this, it's relay just a queue you have exclusive access to.

This setting allows you to modify the password to access the address on the relay, but you can't change the password of the address on the relay

[–] INeedMana@piefed.zip 1 points 4 days ago (1 children)

Hmm. So to invalidate all other accesses one would have to reach out to relay admin?

Since technically it's an email server underneath, maybe that feature could be available via mail web ui if the relay had one?

[–] rakoo@blah.rako.space 0 points 4 days ago (1 children)

@ineedmana

I'm not part of the team, but that is counter to the philosophy of where chatmail relays are going, which is "no admin of mail accounts". All administration must be doable on the device with no dependency on the server. It is important that the server can be offline, or just disappear with no warning, and that the user can still do everything.

[–] INeedMana@piefed.zip 1 points 3 days ago

Well, in that case administration of password change seems to not be doable on the device