It also effectively means they are reading those messages.

Xchat is an irc client though.

The one true XChat

Weird, I didn't see 'probably' once in your reply.

I mean they’re encrypted in transit. They’re just not end to end encrypted.

Enshittification continues

Yes and? Do people who use X really care about privacy. Everyone who even remotely cared already jumped ship and moved on to matrix, signal, Simplex etc.

And im not even mentioning the fact X is owned by a psychopath. But hey let's pretend they care about your privacy.

Deleted

Stop using fascist things.

Stores, websites, apps, cars, hosting, operating systems, and all other providers of goods/services should be audited by you. You should then ask yourself if you want to give them your money and/or your trust.

I'm trying, but they keep forcing it into devices I already own and even with turning it off in the settings sometimes it gets turned back on during updates. At least avoiding the X/shitter bot is easy enough, but the rest are just as invasive.

Do not look at all those (proprietary) E2EE definitions to closely - you might find several that define TLS as end to end...

Out of curiosity what devices are giving you these issues? I may know of some alternatives depending.

inb4 the logo looks like this:

Anything with a web browser. Work computers. Phone. Have to turn off the AI crap on all of those manually after they were added in updates.

Don't really believe turning off the settings keeps them from farming data either, since they constantly lie about what data they collect and use for training.

I mean TLS is also encryption in transit, it’s in the name. And it would sorta be end to end if you’re terminating TLS at the end you’re trying to talk to.

If anyone except you has the private key, then your private messages are not private.

To extend this, that includes YOU giving your key to another application to decrypt those messages.

For example if you use an app or browser extension, that app or browser extension has access to that key. Additionally the browser itself or operating system had access to the key.

Now they may be fully audited. They may have a great reputation. You may trust them. But they are part of the decryption (and if sending encryption) process.

It's a chain of trust, you have to trust the whole chain.

For web browser's, check librewolf or brave, I would lean further towards librewolf just because it's oss which is something I value.

For search engines, we're in a weird spot right now because Microsoft is restricting the use of Bing's search API, but duck duck go is good, and ecosia as well, but they both may be in a rough spot soon.

Work computer you can't do much other than ask your supervisor to ask about moving away from ai stuff, all you can do directly is limit your personal information on your work station.

For phones, If you have apple, sorry, if not, you could look into changing the operating system on it to something like e/os or graphene os, they are both operating systems that are focused on privacy and security.

If you need anymore information about my recommendations, I am happy to help.

Thats the problem. Say, I'm offering you a cloud drive and tell you "your data is end to end encrypted". You sync data from your PC to my server and from my server to your mobile phone. Would that mean

1. That everything between your devices is encrypted (=I can't see what you're saving, neither can "the state", hackers,...)or
2. That your data is encrypted in transit, but is saved unencrypted on my server (which means everyone with access to my server can see your data) or
3. It's encrypted in transit and also on my server, but the keys are also ony server, so that everyone with access to my server can in theory decrypt everything and access everything?

1 is what you want, 2 and 3 are often what you get...