Title.

I’ve used it before, but I’m not really sure how I feel about it. Would you use it on a day-to-day basis?

  • jet@hackertalks.com
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    6 months ago

    The session developers are interesting. But I don’t recommend anybody use session.

    They took the signal protocol, and removed perfect forward secrecy because they found it hard to implement.

    That’s crazy.

    Also all of the file transfers on session go through servers in Canada. Centralized.

    I give them kudos for trying to make the network self-sustainable through their crypto thing, but they never found a way to actually monetize it, there’s no paper use, it feels like the idea is kind of dead in the water at this point. I would not recommend session for any serious non-experimental usage

      • jet@hackertalks.com
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        5 months ago

        It’s not a lie. I have read their post. And my interpretation reading between the lines is they dropped it because of complexity

          • jet@hackertalks.com
            link
            fedilink
            English
            arrow-up
            2
            ·
            5 months ago

            Fair enough. They did not explicitly say they removed it for complexity.

            The facts are: they started with a protocol that had perfect forward secrecy, and they removed it, but not for philosophical reasons.

            They were not opposed to perfect forward secrecy

            In today’s ecosystem there are products that use onion networks and provide perfect for secrecy like simple x, and briar over tor…

            You’re welcome to make any decision you like, if you want to use session go right ahead. I’m not going to stop you, and I’m happy you’re doing so. We’re all better for choice