Matrix

416 readers

17 users here now

The secure messaging protocol.

founded 2 years ago

MODERATORS

vexomet@programming.dev

Sunshine@programming.dev

Sunshine@piefed.ca

-1

Matrix Metadata Problem: the server sees everything except your messages (dfrws.org)

submitted 1 day ago* (last edited 1 day ago) by verifytheposter@leminal.space to c/matrix@programming.dev

9 comments fedilink hide all child comments

Matrix Metadata Problem: the server sees everything except your messages

People pick Matrix because of end-to-end encryption. But E2EE only protects message content — everything around it is plaintext.

The server sees:

Your ID, IP, client type and version, device you use
Your presence, typing status, read receipts
Which rooms you join and when you join/leave
Who else is in those rooms → your entire social graph
Room names, topics, avatars (all plaintext state)
For every message: who sent it, which room, a millisecond timestamp, type, size

And federation copies all of that to every other server whose users are in the room. Your "social footprint" isn't one copy — it's as many as there are servers.

you are viewing a single comment's thread
view the rest of the comments

[–] MentalEdge@sopuli.xyz 2 points 23 hours ago (1 children)

Things that are good to understand, but also conclusions you can come to by just thinking a bit about how it would have to work. Some of it is less obvius, like session details. I actually don't know, does session info federate? Can't see why it would need to.

A sealed envelope still has to have recepient info, and while it would be possible to have the server forget a lot of info after delivery, you can't enforce that.

One of these is also an exaggeration, federation doesn't copy everything to every other server, only the parts of your activity to servers that participate in that particular activity.

If you chat on your matrix instance with another user on your instance, only your instance records the event.

If you DM someone on another instance, only your and their server have a record of that. Not every matrix server on the network, that'd be absurd.

[–] PokerChips@programming.dev 1 points 8 hours ago

I think OP's llm is hallucinating with blockchains