Federation is a huge liability in other ways and holds back the privacy and security of the ecosystem by requiring backwards compatibility and ending up with a bunch of awful / poorly maintained implementations. I used to believe in XMPP + OMEMO, but I don't use it in practice.
Conversation
I think Matrix is a great example of everything that's wrong with federation. It was an opportunity to prove otherwise, but it did the opposite. Trying to be all things for all people and prioritizing features above privacy / security is a serious issue. Extensions are an issue.
1
Signal has taken a slow and steady approach to implementing features in a way that fits into the privacy and security focus. If there were other clients / servers innovating and racing to come out with features, it would be a problem. There are federated alternatives to Signal.
1
I think Signal has ended up being such a good option largely because it has centralized development and implementations. Once it has usernames, other federated servers for those could work, but they'd need to be forced to upgrade promptly, which is probably just not realistic.
1
So, lets say that one of these is used by 100k people and stops being promptly upgraded. They want to drop support for the old protocol version, as it's holding back development and those users also aren't going to be secure. What happens? Should they just break that server?
1
They did attempt federation at one point and if I remember correctly it turned out very badly. I think it was bundled into CyanogenMod with them having their own server, and they didn't take it seriously. Worth noting Signal's client expires and must be updated quite quickly too.
1
The same thing would have to apply to servers, but users wouldn't have a way to deal with it. They can't force the maintainer of their server to update. Also means people will be using servers that are going to go down which wipes out their identity. Happened to me on XMPP twice.
1
Replying to
You make compelling points, thank you. I wish Signal didn't accept money from the US government. I'd be happy to pay for the service myself. After all, if it's free I'm the product, not the customer.
1
Replying to
"After all, if it's free I'm the product, not the customer." is a silly thing to say. Have you heard of a non-profit organization? Not every organization is a company run for profit and not every software project is a product. I also don't see why they should reject any money.
2
Replying to
"Have you heard of a non-profit organization?"
I believe that question was asked in bad faith.
"I also don't see why they should reject any money."
Money buys influence. Where it comes from matters. I am sure Moxie and Brian are doing the best they can, however.
1
Replying to
You're the one posting something like "After all, if it's free I'm the product, not the customer." as if it can be meaningfully applied to every non-profit open source project. Don't throw around vague and ridiculous accusations like that if you want a productive conversation.