I recently came across this project, does anyone have any information, or background on it? https://getsession.org https://github.com/Loki-project
From my understanding it’s a fork of Signal, with some fundamental differences in network design
community should promote federate chat solution like xmpp or matrix. Everything dealing with your privacy should be federated.
Well that’s not quite true. First federation means sharing a lot of metadata: you have to federate so finding users on a federated i hard without sharing metadata. Matrix “leaks” a lot of metadata. Privacy with “what” you say? Yes, but most offer you this. Privacy with who talks to who, where, etc? Nope.
Signal is Open Source and server builds are replicable (you can be sure that they run official on their AWS server), being centralised means that almost no metadata is leaked. But I also dislike the ways OWS and Moxie make their decisions.
I recomend you reading the whitepaper of Session at getsession.org. Session is decentralised and it has all the Signal benefits (Signal protocol, and no metadata). How? Onion routing. As said, read about it I recommend you a lot.
server builds are replicable
Assuming this is what is really running on the server side, and there is no way to prove it. And there is no way to run an independent server and federate with the walled garden.
being centralised means that almost no metadata is leaked
This is plain false.
Huge list of security problems with Signal:
https://github.com/privacytoolsIO/privacytools.io/issues/779
(and note that privacytools.io still endorses Signal even after being made aware of this)
People really have to learn to differenciate between PRIVACY and ANONIMITY. Two different concepts.
Well its run by a US company, and they dont allow anyone else to distribute versions of their app (eg fdroid), even though its open source. Also the server code is not open source. I prefer Telegram, at least this way only the Russians get my data.
The client app for Signal users is also non-free software soon to be removed from the FSF Directory: