@kevingranade@mastodon.gamedev.place
2026-02-13 18:56 UTC
@crazyeddie@mastodon.social @0xabad1dea@infosec.exchange @ratsnakegames@mastodon.social not that they're unaware of it, but that they're claiming that general-purpose chat tools (and recently this is directed at "discord killers") MUST support e2ee as a bare minimum, which is just not necessary and gives a false sense of security for a group chat without membership vetting, which is one of the other "must have" features.
I've seen the same insistence in several places.
Replies (1)
-
@kevingranade@mastodon.gamedev.place 2026-02-13 20:48
@crazyeddie@mastodon.social @0xabad1dea@infosec.exchange @ratsnakegames@mastodon.social what people think this is giving them is "my messages aren't stored in plaintext anywhere that can have access to it trivially granted", but if you don't have strong access controls in the first place, someone can just join and bam they have access granted? And if you have strong access controls you're not actually talking about a discord killer or general purpose chat framework because the join overhead is much, much higher.