Ⓥ
(he/him) @tortie @sbb @waeiski Yup :/ @Mer__edith Any chance of diversifying away from AWS? Main reason I brought this up is for anti-Amazon reasons, not privacy issues.
@chiraag @tortie @sbb @waeiski @Mer__edith This is not "the elephant in the room" and neither is deltachat a reasonable alternative. The metadata that delta leaves is *significant* and can be tied to an individual. That's why it is crucial to use a "trusted" mail provider, because delta doesn't use any of the advancements in cryptography of the last decade.
The data traces Signal leaves on AWS is not personal data, the metadata is minimal and they make efforts to reduce it further. AWS is still a problem, but one of Availability (what if Bezos cancels his contract with them?).
Please do not compare them based on where they store the data, if the amount and kind of data stored is very different.
@ljrk @chiraag @tortie @sbb @waeiski @Mer__edith
As far as encryption is concerned. Yes, #deltachat does not currently use PFS, apart from TLS 1.3. But PFS does not only have advantages. It requires a certain level of trust in the servers and makes it difficult to use many devices with a single account. Chatmail servers are "dumb". They forward messages and temporarily store metadata. As described above, this metadata is only problematic to a limited extent.