I am not comfortable that signal depends on prosperitary google library. However, I find that Molly lags significantly behind signal (around 1 to 2 weeks, so maybe not as significant as I thought), but I am just concerned that if there is a security fix in signal, molly will not be able to react as fast.
I am also quite frustrated with the general lack of communication from the signal team (for example the lack of communication regarding username). I doubt they will have the good will to help molly when there is a critical security fix.
It is frustrating that signal no longer seems like the gold standard for privacy any more; unfortunately, all my friends are on there (ironic, isn't it...).
20 Comments
maroudava@lemmy.world · 11 pts · 3y
There's a FOSS fork of Signal which removes Google dependencies from the software.
https://github.com/tw-hx/Signal-Android
baseless_discourse@mander.xyz · 4 pts · 3y
Is there any advantage of using this instead of molly?
zorbse@lemmy.blahaj.zone · 2 pts · 3y
Hasn't been updated in a year and is over 3000 commits behind Signal. I wouldn't use
maroudava@lemmy.world · 1 pts · 3y
Platform27@lemmy.ml · 10 pts · 3y
Should note that their GitHub says:
I’m not sure on their track record, but if their claims are true, this could be a fine, secure client.
Anticorp@lemmy.ml · 9 pts · 3y
Right at the top of the Molly page.
baseless_discourse@mander.xyz · 5 pts · 3y
AFAIK, they have a FOSS variant
Also the line right after your quote:
jeena@jemmy.jeena.net · 6 pts · 3y
For some reason I also was able to get most of my friends and family on Signal and just a year later I set up Matrix and now nobody wants no move anymore.
jabberati@social.anoxinon.de · 4 pts · 3y
@baseless_discourse The gold standard has always been XMPP. It's the IETF Internet Standard for messaging, no walled gardens, ability to self-host, no phone numbers required and modern clients use the same end-to-end encryption protocol as Signal does.
matricaria@feddit.de · 4 pts · 3y
Is there a community for XMPP? I would like to know what clients people use on iOS. So far I found them all to be pretty insufficient.
jabberati@social.anoxinon.de · 1 pts · 3y
@matricaria There is a community around XMPP. Of course you will find most of them in public XMPP channels, but many are also active in the Fediverse/Mastodon. I don't have any Apple devices, but a few of my friends use Monal ( @Monal ) which seems to be the most reliable client on iOS currently.
ninchuka@lemmy.one · 1 pts · 3y
It's not the same encryption, it's based on the same double ratchet design that's it
pabloscloud@lemmy.world · 2 pts · 3y
For me Molly works but one can't use Signal betas (obviously) and backups are currupted for me for months.
baseless_discourse@mander.xyz · 1 pts · 3y
I see similar complains in their issues. That unfortunately sounds like a deal breaker...
an0nym0us@lemmy.world · 2 pts · 3y
Do you mean proprietary?
shortwavesurfer@monero.town · 2 pts · 3y
I use molly and it seems to be fine. You do make a fair point about a delay like that but i am not personally that concerned. If it were a month or more i would be apprehensive, but not a couple weeks.
FlappyBubble@lemmy.ml · 2 pts · 3y
What's your threat model?
Signal as a gold standard for encrypted messaging is based on many factors. Ease of use, UI/UX, protocol, platform support and so on.
Even though I'm a hard core FOSS person I'm also a realist. Sticking to a common platform is worth a lot. Bridging stuff with Matrix is cool but will not take off among most people.
Signal using Google blobs is a problem but let's face it, the UI will be presented on a Google branded Android phone or a iOS device anyhow. Sure you can use GrapheneOS and Molly or you can switch to another app altogether but heck you'll have no other to talk to then.
rikudou@lemmings.world · 1 pts · 3y
I've been using it for close to a year because I can't link Signal to my desktop using QR code, Molly allows to provide the link directly and thus I use it. Everything works great.
jvrava9@lemmy.dbzer0.com · 1 pts · 3y