For quick reference, we've created a handy guide designed to be printed, folded, and carried in your pocket (PDF download).
Now, more than ever, citizens must be able to hold those in power accountable and inspire others through the act of protest.
Protecting your electronic devices and digital assets before, during,...
Matrix and XMPP don’t hide metadata (who you’re talking to, when, and how often). This is OK if your users are all on the same private server that you self-host/trust. But in practice most users will be on the Matrix equivalent of Gmail, and you’ll be sending this metadata to the largest server in plaintext for every conversation involving one of those users.
I also have trouble where iOS “instant” notifications in SimpleX aren’t delivered–hopefully this gets fixed.
In this case, I think it matters that you can selfhost a server under your control. And to potentially have redundant servers. Maybe even disabling federation to be sure the big ones don’t get the metadata.
Also while the court ordrs have shown that Signal doesn’t collect much metadata now, it does not mean it is not capable of it - which is what matters in a life-threatening situation. Like, all the traffic goes through a single point - there is still trust involved.
Why not Signal? » Good Alternatives
Matrix and XMPP don’t hide metadata (who you’re talking to, when, and how often). This is OK if your users are all on the same private server that you self-host/trust. But in practice most users will be on the Matrix equivalent of Gmail, and you’ll be sending this metadata to the largest server in plaintext for every conversation involving one of those users.
I also have trouble where iOS “instant” notifications in SimpleX aren’t delivered–hopefully this gets fixed.
In this case, I think it matters that you can selfhost a server under your control. And to potentially have redundant servers. Maybe even disabling federation to be sure the big ones don’t get the metadata.
Also while the court ordrs have shown that Signal doesn’t collect much metadata now, it does not mean it is not capable of it - which is what matters in a life-threatening situation. Like, all the traffic goes through a single point - there is still trust involved.