Apparently Matrix (the federated chat system, see matrix.org) uses a directed acyclic graph to enforce permissions, and it just works reasonably well.
I love that for us. No need for a blockchain.
Conversation
Spaces have come a long way, and the whole thing looks like a really compelling alternative to Discord or Slack now.
Thanks, , for sharing your space
Quote Tweet
2
18
It's also a good alternative to things like Signal or Telegram or whatever. Supports E2EE from the client side (even in a browser). Doesn't require your phone number or rummage through your contacts. Completely safe and private.
2
2
21
Replying to
Do you know any good explanation of how it's supposed to do meaningful e2ee without trusting some server operator you're using? (Especially for web version where the client app would be delivered by them, I guess..?)
2
Matrix only has E2EE for message content. Servers can see all the events and metadata for rooms including invite, join, leave, kick and ban events. They can see who sent each event, the time it was sent and all the configuration for the rooms. Only message content field is E2EE.
You can see this for yourself by logging in with a new client and looking at one of the E2EE rooms where you're a member. You can see everything other than the message content. Even reactions are not currently encrypted although there isn't any particular reason they haven't yet.
1
Matrix web clients work the same way for E2EE as desktop / mobile clients. State events and history for the rooms are stored on the servers and synced between them. Clients lazily download portion of it they need. Cross-verifying or restoring via recovery code gives E2EE keys.
1
Show replies