@Wolf480pl@niu.moe @jerry @Aaron@boringpeople.org there is some hope in the p2p world.
BitTorrent is not exactly a "messaging" protocol, but got immensely popular.
FireChat, a p2p messaging app, got very popular during protests in Romania. Sadly it's proprietary, so I'd stay far away from it.
Briar doesn't need any introduction in this group, methinks, but is not popular at all... yet.
But, messaging and e-mail are two different things. It's not just about sending the message. It's about the infra around it.
@rysiek @Wolf480pl @jerry @Aaron I'd like to add Tox to this list.
It's freesoftware with multiple GUIs, and is quite similar to Briar. Except they do allow adding remote contacts (though sharing the pubkeyhashes to do so may not be practical for most), and they've made superficially different protocol decisions.
@rysiek @Wolf480pl @jerry @Aaron I don't know about these security issues, and I haven't heard of any auditing (though I am interested in any).
And I mostly just use my laptop, so I didn't notice those battery issues.
Wish I could be more informative.
@alcinnz @Wolf480pl@niu.moe @jerry @Aaron@boringpeople.org sexurity issue:
https://github.com/TokTok/c-toxcore/issues/426
Talk about audit:
https://github.com/irungentoo/toxcore/issues/121
@alcinnz @Wolf480pl@niu.moe @jerry @Aaron@boringpeople.org I think you could go Matrix. Heard good things about it.
Also RetroShare seems interesting, but also bloated.
I am not concerned about Briar's codebase. People working on it are as solid as they come, and Briar went through an audit already. More problematic is the model of establishing contact, which requires physical presence or a common friend. I like how secure it is, but I understand how annoying it might be at times.
For me personally Briar looks good.
@rysiek @Wolf480pl @jerry @Aaron I'd by no means discourage others from Briar, it looks like a useful tool. It's just not for any usecases I can foresee myself having.
As for the personal auditing, it's something I like to make a habit of. Not that I seriously trust myself to catch many or any issues, but nor do I trust enough auditing is done. And I be no means trust myself with auditting crypto, the most I really can do is say "yeah, that kinda looks like crypto". I'm glad you trust the devs.