Plus, my friend Praveen, I invite you and Indian friends to my fun poll about #Messengers https://floss.social/@ademalsasa/105587887622215525 it's 2 days and almost 800 people participating (and counting).
I bookmarked this!
This is to teach the basic concepts of Free Software + federation and later we may create repository for evaluating all apps based on these criteria.
@praveen really nice diagram!
Still glosses over no group e2ee with telwgram, and e2ee turned off by default, but hey, other than that the vwat I've seen recently!
@praveen I will try and promote further as best I can.
As I am also involved with various tech groups then I can also invite people in to discuss further.
It is about dependency on Google, I don't think Google will get any info because Signal uses Google Messaging Service. It just tells Android to start Signal and check messages. All data and metadata is handled by Signal then. If you like to avoid sharing phone number, try #xmpp or #matrix. Quicksy is available in fdroid and works without Google Messaging enabled and has same usability of Signal but needs phone number.
Nice list, only sad to see that end to end encryption and metadata handling aren't included, which are very important regarding messengers.
Metadata handling is important when you are using a centralized service. With federated services, you can self host and have full control over metadata.
True, but for 99 percent of everyone I know, self hosting isn't an option and then you have to trust the host because they'd (obviously) not let you have a look on the server to check what's actually running on there.
So that basically also comes down to complete trust, but when you add the fact that the host can access all metadata... I surely hope they don't store metadata/messages longer than necessary and provide a sealed sender option.
There are people who has a track record of fighting for privacy just like what Signal claims who run these services. autistici.org riseup.net disroot.org for example. Some of them has been fighting for many years before even Signal existed. So it is not like either Signal or self hosting, there are many options in the middle.
Oh I fully agree with that! I'm just saying that, as long as you can't peek into a server (whether ran by a non-profit, commercial party, volunteer... you name it, you cannot verify anything on the server side so imo, just that its decentralized doesn't mean it should be trusted more on that regard.
I'm a huge signal fan but I'd love to also use Matrix and such.
I just find that it reveals too much metadata and the lack of a sealed sender option...
I'm not saying trust because it is decentralized. But because it is decentralized, you can find a trusted organization or in case there are none, you can host it yourself.
#Threema only has client app as Free Software. So something better than #Telegram but not as good as #Signal because Signal provides server side also as Free Software. It has some good features compared to Signal because it does not mandate a phone number. Also hosted in Europe may be an advantage.
@praveen tox is experimental and highly insecure. I would not recommend that one to anyone at this time. But I love the concept.
Yes, p2p has to evolve still to be a complete replacement, but from the point of view of privacy and freedom, it is the best option. Briar is pretty good.
@praveen wouldn't just say, "be careful" about telegram as it only has transport encryption not e2e encryption by default and not even allowes e2ee in groupchats. i would not recommend it at all.
That is why it is marked as be careful. People still have an option to turn on secret chats. The recommended ones are federated and p2p options. The info graphics is comparison of all options, all of them are not recommended.
@praveen Hi, thank you for thisillustration. Can I use it and translate it in French? If you have the original file could be better for me ^^ :)
Source is available at
@zorglub is interested to do a French translation as well.
@praveen I Just included this on the website (replaced the image link with the new one)
Would it be possible to perhaps insert the version number in the bottom corner please. That way people know which one they are looking at ?
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!