Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

XMPP leans heavily on capability negotiation and service discovery which makes it straightforward to degrade gracefully when feature mismatches occur. Matrix is significantly lacking in this regard.


Unfortunately, some of the features that can degrade are things like "the chat is actually secure."


I strongly prefer that with XMPP I can disable the encryption when it breaks to tell my friend I'm trapped under a boulder and bleeding out. With Matrix our chat is encrypted, I can't turn it off ever, if it stops working I can't communicate, my only option is to make a new room with encryption disabled and invite my friend hoping he sees the invite and accepts in time.


It's funny because I remember having an issue where my friend was sending me messages, and he couldn't read my messages, and my mobile client (Siskin) didn't let me turn off encryption for outgoing messages.


Recommendation: if you're trained under a boulder, use the device you're running an XMPP chat client on to call 911.


I want to see this movie

Edit: now I can't stop thinking about correlation vs causation - you being under the boulder bleeding out at the same time XMPP encryption suddenly stops working.

Physical hardware certificate thinggy which got crushed?


That's how RCS's Universal Profile is too though as far as I understand with the new encryption standards.

Id rather someone be able to reach out to me with a note the chat is insecure, rather than be unreachable at all




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: