Who exactly can see a private message on Lemmy? Anyone who runs a server? Or only the sending/receiving server?

And what all is your experience with Matrix? I don’t have an account, and imagine I would need one if someone wants to message me there.

  • arotrios@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    6 days ago

    Your DMs are not private on most Fediverse platforms. The ActivityPub protocol doesn’t provide encryption or filtering on non-local content, and treats DMs very much like it treats comments or posts.

    For instance, I equipped a Wordpress install with the ActivityPub plugin and connected it to a small Mastodon instance. I found that it could read every non-local DM coming from that instance.

    Essentially, if you’re DMing within an instance, it might be somewhat secure, depending on how the instance is setup. If you’re DMing between instances, there is no security - assume anyone who can read the ActivityPub feed can read your messages.

  • WillieShen@lemmy.world
    link
    fedilink
    arrow-up
    3
    ·
    6 days ago

    I have a Matrix acc and joined several rooms of FOSS, but sadly it looks like most of them are still less active than their Telegram/Discord counterpart.

  • Shadow@lemmy.ca
    link
    fedilink
    arrow-up
    5
    ·
    6 days ago

    The sending and receiving servers both have the message in plain text, so you can view them directly in the db.

  • communism@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    5 days ago

    I use Matrix for a lot of my chatting to friends. It works fine. Bit janky, but I don’t mind.

    The disclaimer you’re seeing just means that DMs are not e2ee, so the server admins of the sending/receiving servers can read the message. You could use DMs to exchange details for chatting on an e2ee platform if this is a concern.

  • JonnyRobbie@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    6 days ago

    Yup, Inuse matrix, but it has a strong metaphor to email that you have to chose your provider. And the problem is that the official instance is under heavy load but at the same time, you don’t want to setup your acc with some noname homelabber pepe. I woud research second or third biggest instance and go there.