undefined | Better HN

0 pointstptacek5y ago0 comments

Yes, the author ghost-edited it out of his post, months later. You can see the original on Archive.org.

Matrix was years from being E2E by default when this post, and that recommendation, was written.

0 comments

3 comments · 1 top-level

Shared4045y ago· 2 in thread

> Yes, the author ghost-edited it out of his post, months later.

It was still removed. Would it have been better to leave a note saying it had been? Yes. Nobody is perfect however.

> Matrix was years from being E2E by default when this post, and that recommendation, was written.

See point B from my other comment.

Edit: Add Would ... however.

tptacekOP5y ago

I'm not sure how point B is relevant. Obviously, every message board argument about bad UX is going to feature someone saying that the UX is just fine. Telling vulnerable users to adopt a tool that is default plaintext is malpractice.

Shared4045y ago

Whenever I moved my friends onto Matrix, all I had to do was hit the "Encrypt room" button for each of our rooms. They did not have to do anything else. Is this ideal? No.

Is it E2E for their other rooms? No.

Is it E2E for any usage of matrix they were going to be doing? Yes.

I also told them to be sure to hit that button if they did start any other rooms. None of them ever did, but they knew that they should if they cared about being secure.

Riot.im also did a good job of letting you know that it was unencrypted unless you hit that button.

Edit: What it boils down to, is that Matrix has been easy to set up E2E for as long as I can remember. It is also trivial to create a matrix account with no tie to your IRL self.

j / k navigate · click thread line to collapse