The other day I switched Linux distros, wiped disk, and somehow realised that OMEMO is a weird freaky thing and now I cannot see any message from my computer, even though I have everything visible on my Conversations Android app.

I don’t want to get angry again, but… yeah, this is terrible, terrible UX. Seems like OMEMO somehow encrypts for each device differently, and now all messages are “locked”. Which is weird, because messages are still there, just “locked”.

Can I somehow import a backup from my Android app? Is there anything that can be done? My guess is that, probably not, otherwise I would have gotten a popup or something in the login process, “would you like to sync your messages?”, but nothing happened.

XMPP supremacists, please! Give me a solution! I was organizing important projects with multiple people. Getting locked out of all that information is terrible.

Otherwise, then I really feel I can see XMPP disappearing now… and for a very good reason.

  • projectmoon
    link
    fedilink
    95 days ago

    OMEMO by design does not allow old messages to be decrypted by a new device. However, anything going forward should sync between all XMPP clients that implement proper XEPs. The server also has to support the XEPs. But if you’re using OMEMO, then you should also already have the other XEPs required for proper messaging experience. Specifically, the XEP for syncing messages across clients is Message Carbons.

    Matrix is able to decrypt past messages on new devices, but that’s because it stores your keys (encrypted) on the server and does a bunch of funky key fetching and passing between sessions to allow message decryption from new verified sessions. OMEMO does not have this function.

    • projectmoon
      link
      fedilink
      25 days ago

      But, you should be fine if you have a backup of Conversations, at least on Conversations itself.

    • @[email protected]OP
      link
      fedilink
      35 days ago

      That is very sad. I’ll be migrating out of XMPP. It’s intolerable that one cannot recover messages that are still there; or that even moving from one client to another implies you lose all of your history.

      • projectmoon
        link
        fedilink
        14 days ago

        [email protected] it also seems that Conversations now has the ability to preserve message history when moving devices. Of course this is different than moving between clients, but it’s a step in the right direction.

      • projectmoon
        link
        fedilink
        65 days ago

        @[email protected] in this case, it was designed explicitly as a security feature. It’s not uncommon for end-to-end encrypted services to have this limitation. Signal has it, for example. Only way you can keep your message history with Signal is to migrate it directly from installation to installation, and it doesn’t sync old messages when setting up the desktop client.

      • @[email protected]
        link
        fedilink
        25 days ago

        This is a security feature. Other communication mechanisms having the keys somewhere else not owned by you is rather something I wouldn’t stand. And to me it’s unsafe that messages would be kept way long on the servers.

        On xmpp the sync happens from server to all syncing clients, and the proper XEPs need to supported in both the client and the server.

        • @[email protected]OP
          link
          fedilink
          24 days ago

          Then losing all your project’s history, while also forcing you to stick to a single, unofficial (because there is no official) XMPP client for the rest of your life because there are no standardized multiplatform backups. I’m sorry but no.

          You may call it a feature. I call it a huge fat bug.

          • @[email protected]
            link
            fedilink
            English
            1
            edit-2
            3 days ago

            This is a problem a lot of secure/private projects have tbh, they get so into the details that it’s just a miserable user experience.

        • @[email protected]OP
          link
          fedilink
          14 days ago

          I do use Signal. Everyone should have Signal for telephone contacts. But for the other stuff… I’d rather use a decentralized system.