I’m not sure if it is entirely accurate to compare them in this way, as “Matrix” refers to simply the protocol, whereas “Signal” could refer to the applications, server, and protocol. That being said, is there any fundamental difference in how the Matrix ecosystem of federated servers, and independently developed applications compares to that of Signal that would make it less secure, overall, to use?

The most obvious security vulnerability that I can think of is that the person you are communicating with (or, conceivably, oneself, as well) is using an insecure/compromised application that may be leaking information. I would assume that the underlying encryption of the data is rather trustworthy, and the added censorship resistance of federating the servers is a big plus. However, I do wonder if there are any issues with extra metadata generation, or usage tracking that could be seen as an opsec vulnerability for an individual. Signal, somewhat famously, when subpoenaed to hand over data, can only hand over the date that the account was created, and the last time it was used. What would happen if the authorities go after a Matrix user? What information about that user would they be able to gather?

  • Lichtblitz@discuss.tchncs.de
    link
    fedilink
    arrow-up
    6
    ·
    1 year ago

    Threema is very security focused at the expense of user experience. You lost your private key? Tough luck, here’s a new account and everyone will have to verify your new account again. I have had conversations with friends over five or six of their accounts because they use threema just like WhatsApp. I stopped recommending threema to folks without a basic technical understanding. Signal is more than good enough for their needs.

    • TWeaK@lemm.ee
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      Lol and here’s me running a rolling backup with everything in it. Haven’t had to redo it ever really.

      The only thing is it’s a paid app. Although, I don’t mind buying licenses for people I want to talk to.

      • TWeaK@lemm.ee
        link
        fedilink
        arrow-up
        3
        arrow-down
        1
        ·
        1 year ago

        I brought up Threema in the end of my comment, the one they replied to, saying I rate it slightly better than Signal.

      • Lichtblitz@discuss.tchncs.de
        link
        fedilink
        arrow-up
        0
        arrow-down
        1
        ·
        1 year ago

        Who asked about Threema?

        The comment above me started that topic. The one I responded to and you seemingly haven’t read.