Is matrix good to use, seen a lot of drama around it. For example hackliberty.org left it because of lacking of security and moderation, do you still recommended it?

  • @[email protected]
    link
    fedilink
    64 months ago

    Yes and No

    I consider matrix to be somewhat equivalent to XMPP or public mailing lists. It is potentially decentralized (even though everyone uses matrix.org) and it can host group chats. And for those purposes it is ok-ish, but for privacy it is no good.

    My pet peeve with matrix is that I consider most features to be half baked. And instead of fixing them we just keep pilling up more. Here is a list in no particular order

    • encryption regularly breaks in weird ways, usually you see a message that you can’t read
    • if you enable encryption in a chat room you cannot disable it
    • we now have two official clients for Android (Element and Element X) in the first one encryption breaks in weird ways, in the later there is no way to use Spaces properly
    • direct messages between people don’t work well - it is like they are a room with the two people
    • privacy wise matrix is weak, leaks metadata, attachments are not encrypted, etc. Do not use if you expect privacy/anonymity. Also I think most groups run without encryption because of the other issues.
    • verifying sessions between clients is painful e.g. the client annoys me to verify but then verification does not trigger on the second client

    Because of this mess your quality of experience will vary depending on the client and features you use. The web clients are usable.

    I don’t really use the video/audio calls so I have no comments on that front.

    • mox
      link
      fedilink
      34 months ago

      encryption regularly breaks in weird ways, usually you see a message that you can’t read

      This was once common, but it’s somewhat rare now in my experience, and the upcoming Matrix 2.0 apparently addresses most (all?) of the remaining causes.

      if you enable encryption in a chat room you cannot disable it

      I consider this a good thing, for the sake of the people who joined or wrote in the chat with the understanding that what they write is and will remain encrypted. If you want to abandon encryption, you can always create a new room.

      we now have two official clients for Android (Element and Element X) in the first one encryption breaks in weird ways, in the later there is no way to use Spaces properly

      No, there is one officially released client for android: Element. Element X is in beta. When it leaves beta, it will take over as the one officially released client.

      direct messages between people don’t work well - it is like they are a room with the two people

      It works well for me. How is it a problem for you? It looks just like the person-to-person chats on other platforms I use, including SMS.

      privacy wise matrix is weak,

      Privacy of message content is not weak at all.

      leaks metadata,

      It’s true that some metadata can be read by admins of the servers that have been invited into a chat. Given all the features that Matrix uniquely offers, that’s an acceptable tradeoff for many of us. Also, the developers have stated that moving most of that metadata to the encrypted channel is planned.

      attachments are not encrypted, etc.

      This is just plain false.

      https://spec.matrix.org/latest/client-server-api/#sending-encrypted-attachments

      • @[email protected]
        link
        fedilink
        14 months ago

        This was once common, but it’s somewhat rare now in my experience, and the upcoming Matrix 2.0 apparently addresses most (all?) of the remaining causes.

        I still see it - usual case is when someone has two clients. One of them will have issues with this.

        I consider this a good thing, for the sake of the people who joined or wrote in the chat with the understanding that what they write is and will remain encrypted. If you want to abandon encryption, you can always create a new room.

        Disabling encryption in the room did not have to mean decrypt past history. Yes you can create a new room. But for big groups who wants to risk it. The room admins I know steer clear of encrypted group chats because of the previous issue.

        No, there is one officially released client for android: Element. Element X is in beta. When it leaves beta, it will take over as the one officially released client.

        One would never guess based on the release announcement

        This is just plain false.

        https://spec.matrix.org/latest/client-server-api/#sending-encrypted-attachments

        The docs say it clearly “If encryption is enabled”. Otherwise attachments are just a link, nothing special there.

  • @[email protected]
    link
    fedilink
    54 months ago

    Matrix is still in my “recommend” category for real time federation. With third room still being the coolest example of what that can mean so far. They build on the same libs that make Peertube work too for the video sharing aspect (not the video metadata sharing and socials that all ActivityPub).

    I’m really excited to see dendrite make it to client devices for real p2p servers, maybe even as a micro service deployment. I do want to try out the Conduwuit too.

    That said the metadata leakage is an issue to me and consider that a serious flaw depending on your threat model, and you want to extra steps to preserve your identity from an untrusted matrix network and/or stick to a private one you trust

  • Rav Sha'ul
    link
    fedilink
    English
    64 months ago

    I don’t use Matrix due to a permanent copy of all activity being kept on servers. It seems Matrix only has private group chats but not end-to-end direct messaging to add a contact and message them, you have to invite a user to a chat.

  • @[email protected]
    link
    fedilink
    English
    74 months ago

    As an end user it feels bloated and slow, the apps are all over the place and it still doesn’t have voice rooms like discord does.

    Also abandoned channels seem to be a huge issue, many of the channels I’m in are on like the 10th version or more and keep creating new ones for some reason, losing the history of the old ones.

    The idea is really cool, and it mostly works, it just needs a ton of refinement.

  • @[email protected]
    link
    fedilink
    English
    74 months ago

    I find it to be pretty trash, and that’s just my layman’s opinion. I won’t get into my professional opinion…

  • @[email protected]
    link
    fedilink
    English
    34 months ago

    Overall, it’s good, but you need to know what exactly you’re signing up for. The reality is that you can run a decentralized or centralized E2EE chat server, along with voice/video calling, without much effort. There are hiccups with the key exchange that suck, and metadata isn’t really protected. It really comes down to if it meets your particular requirements.

    • ProdigalFrog
      link
      fedilink
      English
      74 months ago

      Depends on your needs. Matrix can mostly replace the functionality of Discord, which makes it stand out despite its flaws.

      If you just need group chat, encryption, and 1 on 1 calls, XMPP is easily self hosted and highly scalable.

      SimpleX seems to be another decent option that’s decentralized.

  • @[email protected]
    link
    fedilink
    English
    54 months ago

    Depends on the use case an server.

    Google and facebook do not yet have public servers. You want a trudtworthy server such that noone abuses your metadata like the time of sending a message.

    It’s very useful for companies like email but for real time communication. I’d prefer matrix over most other forms. In many companies and agencies matrix is getting introduced these days.

    It’s not anonymuous just like signal isn’t perfectly anonymuous.

  • Sonalder
    link
    fedilink
    44 months ago

    The protocole is fine I think the real problem is the synapse implementation but I could be wrong on that take I am no expert.

    • poVoq
      link
      fedilink
      154 months ago

      While Synapse isn’t great, the problem is that the Matrix protocol is over-designed for a very specific purpose (distributed rooms), that comes with a severe performance penalty but most people don’t actually need this for chat.

      Its one of these cases of a neat idea on paper, but ultimately a solution looking for a problem.

      That said, Matrix isn’t that bad overall, but there are better options like XMPP.

      • @[email protected]
        link
        fedilink
        34 months ago

        Yeah. Would have been much better if it was an option for a group admin - choosing several servers at a time to host if they wanted redundancy. Not forcing it on everyone participating, regardless of their disk size…

        • poVoq
          link
          fedilink
          44 months ago

          Well… there has been some recent museings about something like that from the CEO of Element, but it would effectively cause a two class federation where some servers can not work independently of others (likely in reality mainly servers running on EMS infrastructure, a bit like how in Bluesky you can’t really work fully independent of their infra, and yes Bluesky was explicitly mentioned as inspiration for that idea).

          Having those two options fully independent would basically mean reimplenting xmpp in json as an incompatible alternative protocol and that would make little sense IMHO.

            • poVoq
              link
              fedilink
              4
              edit-2
              4 months ago

              Some comment by the Element CEO on Hackernews, sorry I don’t have a link right now.

              But since it would be optional I am not sure why you worry about that. It wouldn’t change the status quo, which is already bad.

  • irotsoma
    link
    fedilink
    54 months ago

    It’s not a private messaging platform, it’s an anti-censorship messaging platform among other things. If you’re looking for privacy, this probably isn’t the application for that. Though it is somewhat possible to make it more private, that’s not the primary use case. If you’re looking for a platform for public conversations where corporate interests of the day won’t cause your messages to be censored, then Matrix might be useful. But moderation of spam, hate content, etc., is also not going to be robust in general.

  • mox
    link
    fedilink
    94 months ago

    Matrix is good for private general messaging. The fact that it’s decentralised means it can also withstand things like government-ordered shutdowns or back doors, since there is no central point that controls the whole network.

    Two things to be aware of:

    • Some non-message bits (e.g. room topic text and membership) have not yet been moved to the encrypted channel, so those could be read by the administrator of a homeserver that participates in your chat room. Since most people care primarily about keeping the message content private, this is an acceptable trade-off to get all the things that Matrix offers.
    • The upcoming Matrix 2.0 features and design choices simplify the UI and fix some occasional errors. It might be worth waiting until this stuff officially lands in the client apps before bringing your contacts to Matrix, for a better experience all around.
  • @[email protected]
    link
    fedilink
    English
    34 months ago

    Along with the other bits that people like and dislike about it, I have another problem with it.

    In order to deploy software in a manner that is resilient, it’s necessary to deploy it in a “High Available” manner. This usually involves duplicated the service across multiple machines, and then automatically switching from one server to the next if one machine goes down. I consider this necessary for something to be a true alternative to the big proprietary software like discord/slack/etc, for smaller groups or nonprofits who want more reliability. Someone losing internet at their house should not result in the whole service going down. A datacenter going up in flames should not result in that lemmy instance going down (forgot which one this happened to, but I’m referencing a real thing).

    The most common way (and arguably, one of the easiest) to do high availability is Kubernetes. Kubernetes has a sort of package manager, called helm where you can quickly spin up services in a highly available manner. Many services offer official helm charts (Unofficial ones are not going to be maintained reliably, so I don’t like them).

    The helm chart for Synapse and the rest is enterprise only meaning you have to pay. Discovering this is what finally really soured me on Matrix as using it as a discord alternative.

    Of course, I never really considered Matrix a discord alternative. It lacks certain features that people want, mentioned below, like voice rooms (although voice rooms are by definition, metadata leakage, meaning people who dislike matrix for the metadata leakage would dislike voice rooms lol).

    Rocketchat appeals to me because of this. Kubernetes/helm, single sign on, and interestingly, it seems to be able to federate with matrix (although I don’t know if it supports e2ee with matrix). It seems that rocketchat has it’s own e2ee, though I don’t know how it works (or if it’s any good). It also seems to support matrix clients, but doesn’t seem to actually be based on matrix.

    But otherwise, rocketchat seems like a much better discord alternative.

  • Pika
    link
    fedilink
    English
    24 months ago

    I dislike how little security and moderation it has myself. Too basic, IRC seemed to have better moderation support but granted they used bots for more advanced stuff. Not to mention how clunky it seems. That is ignoring the even higher bar required to even get started, having to find both a client and a server to get started is a pretty high bar for a lot of people.