Comment by kevincox
4 years ago
Claiming that Matrix did it is even a stretch. Only a few core features are covered and just about every new feature ships without E2EE. Room topics aren't encrypted, sticker packs aren't encrypted, reactions aren't encrypted...
The devs will tell you that requiring every feature to be E2EE will slow down adoption too much, that can always be added later as another MSC (Matrix Spec Change).
This is not true :| We do everything to encrypt new features - eg voice messages, polls, location share etc are all encrypted. It’s the old features which predate e2ee (state events like topics or sticker packs and aggregations like reactions) which need to be brought in line, and MSC3414 is addressing that.
> The devs will tell you that requiring every feature to be E2EE will slow down adoption too much, that can always be added later as another MSC (Matrix Spec Change).
No?
I'll give you a pass for state events but sticker packs are still going through MSC and it seems that people on the team are happy to add E2EE later?
https://github.com/matrix-org/matrix-spec-proposals/pull/254...
Or is that out of date and there is a new proposal with encryption?
I assume you’re talking about https://github.com/matrix-org/matrix-spec-proposals/pull/254.... There is nobody from the spec core team or for that matter the matrix core team on that thread; Sorunome, deepbluev7 and Cadair are community contributors. You can spot the folks who actually are project members (ie core team) by the “member” label next to their names in Github. It is unlikely that the MSC will pass review (when we finally get to it) unless it’s e2ee… unless MSC3414 automatically handles it.
1 reply →
Do you mean that they send it unencrypted or that it isn't end-to-end encrypted?
Please be precise.
This is probably the most annoying thing about HN lately, the insistence on pretending that only end to end encryption matters.
Meanwhile we see end-to-end encrypted solutions like WhatsApp being cheered forward but ultimately failing badly because all incentives are aligned against security.