# I am the Watcher. I am your guide through this vast new twtiverse.
# 
# Usage:
#     https://watcher.sour.is/api/plain/users              View list of users and latest twt date.
#     https://watcher.sour.is/api/plain/twt                View all twts.
#     https://watcher.sour.is/api/plain/mentions?uri=:uri  View all mentions for uri.
#     https://watcher.sour.is/api/plain/conv/:hash         View all twts for a conversation subject.
# 
# Options:
#     uri     Filter to show a specific users twts.
#     offset  Start index for quey.
#     limit   Count of items to return (going back in time).
# 
# twt range = 1 28
# self = https://watcher.sour.is/conv/a4eab3q
“I had been looking for leaders, but I realized that leadership is about being the first to act.” ― Edward Snowden

from https://www.privacytools.io/#messaging
@carsten Big, big fan of Signal for my everyday use.

What is everyone else using for their main messaging platform?
@screem RFC 2549 👌
@ullarah is that...carrier pigeon? 😂
@screem me trying to use Signal for all and everything. I also switched from gmail ( a long time ago which caused some troubles as I forgot to update that address in a couple places ) to mailbox.org and I am a bit hesitate if I should move over to a paid Tutanota account? I also use Threema for some people.
@screem I primarily use Signal too 👌
@screem I primarily use Signal too 👌
@carsten never heard of mailbox.org before. What are the German officials like when dealing with requests from foreign governments to hand over data? I personally have been using paid protonmail for quite a while now and love it!
@prologic Signal is very very good imo. I'm hesitant to really give anything else a try at this point, especially not Whatsapp after getting Zucked.
@screem eXtensible Messaging and Presence Protocol, myself
@screem signal + xmpp (bridged via matrix for aggregation)

although i am looking to upgrade to @ullarah suggestion.

mailbox.org is a good provider, been around a long time. there's another one called mailfence which is also very good and have been around a good while. protonmail is great, but i pull down all my mail and protonmail makes this complicated with a bridge (paid feature).

germany handing over data to foreign governments likely will vary by the relationship and policy between the requesting party and germany itself. due process is still a thing there.
@screem I think they are the same as all the others. Here is something about your Protonmail

2021, ProtonMail: ProtonMail logged IP address of French activist after an order by Swiss authorities. Source. 1/2
@screem For Tutanota look at this https://www.cyberscoop.com/court-rules-encrypted-email-tutanota-monitor-messages/ and their canary report https://tutanota.com/blog/posts/transparency-report/ . Mailbox.org it self has a transparency report too https://mailbox.org/en/company#transparency-report 2/2
@screem am using mailbox.org for quite some time now, like 3 years or so. Happy with the service, speed and more. I do not really have emails encrypted as I store important stuff locally in other formats and delete them if not needed.
@screem click here https://mailbox.org/en/security#data-protection and scroll up a bit to look out for three big green boxes "Guard", "Mailvelope", and "The Encrypted inbox".
@carsten mailbox at one time they had a tor gateway for connectivity to their service, is this still active?
@screem Matrix whenever possible (ie, close friends and family who are willing to set up an account just to talk to me… I host my own instance for my family), Signal as a second choice, but unfortunately WhatsApp is the de-facto way to communicate where I live. Still, could be worse, at least it's e2ee (in theory / if you believe them). The one I absolutely refuse to use is FB Messenger…
@mutefall @carsten Any experience with Mailbox or Mailfence (or anything else good) with a custom domain? I'm looking to move my family's email away from Google Apps. Was quite excited about Mailbox but then I discovered it seems to be infeasible to have multiple accounts with them using your own domain, since they require each account to individually verify domain ownership through DNS… Considering Mailfence now.
@caesar WhatsApp is not end-to-end encrypted. It hasn't been for some time now since it was acquired by Facebook -- An advertising company.
@caesar WhatsApp is not end-to-end encrypted. It hasn't been for some time now since it was acquired by Facebook -- An advertising company.
@prologic Not true, they use the Signal protocol (well, admittedly you have to take their word for that, since the app is closed source…). But FB does indeed have access to the metadata – who you're talking to and when – which is why I do my best to avoid it. (Signal have access to the same metadata if you use Signal, but I trust them better with it… I'd still rather nobody had it, which is why I prefer Matrix.)

More info here and here.
@carsten Gag orders not being legal in Germany is pretty neat! Might have to give mailbox.org a bit of a try at some point 😊
@caesar mailbox.org has a custom domain KB article. Seems pretty straight forward!
@carsten

👉 Secure Messaging Apps Comparison
@caesar have used both in the past. both are well done, especially if you want to use an imap/pop client. custom domains are supported on both, but i will note mailfence does a better job with rfc compliance on email in general

signal's apps are open-source as well as their server infrastructure. the only thing that's not open is their interface to the intel sgx enclaves (blackboxes). i can accept this risk.

minimal metadata is exposed account id(s), last connection date, account creation date in unix timestamps much less than the facebook
@screem The problem is this bit:

> All mailbox.org accounts have their own, individual security key. This makes it possible to associate external domains to several mailbox.org accounts, if desired, simply by adding their different security keys to the DNS configuration.

Meaning I can't just create accounts for each of my family at my domain from an admin panel; rather, they have to create their own accounts, find their "individual security key", give it to me, and I have to add a new TXT record to the DNS for every account. Way too much hassle 😆
@mutefall Cheers, that's good to know. Both of them do look like good options; I would have gone with Mailbox were it not for the hassle with multiple accounts at the same domain (they seem to be trying to force users who want multiple accounts onto their enterprise pricing). I've played with a free Mailfence account and it seems pretty good (better than Proton as it has real PGP support including automatic WKD lookups).
@caesar no worries. mailfence makes it much easier for multiple accounts under a shared domain. it's a bit pricier but worth it. more or less equates to what you'd pay for two users on google workspace.

really any mail system (even yahoo and gmail) support pgp. i seem to lean towards encrypting emails and signing from the terminal then simply use a mail client or web browser to send the message. but i get what you're saying, nice to have the automatic bits. helps with people adopting better posture