this post was submitted on 16 Jun 2024
134 points (96.5% liked)

Selfhosted

39435 readers
2 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

I am searching for a selfhosted and secure (end to end encryption) chat platform for my family (5-20 users), possibly one i can host on a raspi.

Is matrix a good choice, or should i try something else?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 3 points 4 months ago (2 children)

What makes session less secure? This is the first I've heard of it.

[–] [email protected] 2 points 4 months ago

I am suspicious of it because you pretty much cannot host a node. Well, you can - but you'd have to deposit an INSANE amount of money (like $2k or something). While Simplex, even though I do have a concern with its initial centralization by the power of default, is decidedly easy to selfhost.

[–] [email protected] 1 points 4 months ago (1 children)

Session has user IDs, the so-called "sessions".

[–] [email protected] 4 points 4 months ago (1 children)

Simplex is the first platform I've heard of that doesn't use IDs (which doesn't make much sense to me, practically, but sure). So would you say everything is less secure than simplex?

[–] [email protected] 5 points 4 months ago

I say it depends on what you are looking for. Depends on your "threat model" – among other things.

For example, if you are looking for something more private (smaller chance on linking identities with digital footprint, smaller chance on identifying a person, etc), I suggest SimpleX. They also have a great protocol. Their white paper is worth reading as well. But it might be a little challenging for non-tech people. And the thing is still in development.

If you don't mind Session's IDs (after all you can still store them somewhere and change them), it's a good one. The protocol is promising, and they have a nice white paper. Unlike SimpleX, it's much easier to set up for a non-tech person, although it's also in development.

XMPP (Conversations, Monal, etc) rely on a well-known technology, and it is stable. And the interface doesn't scream "hacking", " techy" etc.

Lastly, Delta Chat is also a nice project, with a well-known record. The interface looks super convenient and familiar. And the functionality is feature-rich enough in case you want to doe something special.

I would say the thing with IDs (or absence of IDs) is yet another layer that ensures privacy and security. But all of the apps are secure enough. Even Signal is secure enough if you don't mind exposing your phone number.

I guess the real question is about convenience. That is, knowing about SimpleX, Session, XMPP, and DeltaChat, which one is convenient, private enough, and secure enough for your particular case.