@raphaelrobert Profile picture

Raphael Robert

@raphaelrobert

Secure messaging at @phoenix_r_d. #MessagingLayerSecurity co-author. @_berlin_crypto_ co-organiser. 🦀. He/him. Over there: @[email protected]

Joined December 2008
Similar User
Tanja Lange photo

@hyperelliptic

Robert Xiao photo

@nneonneo

Security Cryptography Whatever photo

@SCWpod

Christopher Patton photo

@cjpatton_

kennyog photo

@kennyog

Klu photo

@klu_mex

Symbolic Software photo

@symbolicsoft

Benjamin Beurdouche photo

@beurdouche

SAFARI Research Group photo

@SAFARI_ETH_CMU

Emad Omara @ 🏡 photo

@Emad_Omara

Adrian Perrig photo

@Adrian_Perrig

POC_Crew 👨‍👩‍👦‍👦 photo

@POC_Crew

Andreas Hülsing photo

@cr_yp_to

Marc Stevens photo

@realhashbreaker

Adam Bates Yuile photo

@AdamBatesOrg

This might be an appropriate time to mention I’m also on Bluesky: bsky.app/profile/raphae…


🔐 Discord introduces end-to-end encryption with Messaging Layer Security (MLS) 🔐 Im really happy to see another large scale MLS deployment. It shows the technology is fit for purpose, demonstrably so. discord.com/blog/meet-dave…


Today I learned about pax.dev and I was briefly hopeful that we might be able to replace Flutter with something rustier. But no, Flutter remains the most comprehensive UI framework besides the native options. I wonder when we’ll have a Rust UI framework that good.


📣 New release of OpenMLS 📣

We are happy to announce the release of OpenMLS v0.6, a significant update to our open-source MLS implementation. This version includes several new features and improvements. Read all details on the blog: blog.openmls.tech/posts/2024-09-…



We are hiring two Rust engineers!

We #hiring a full-time and a freelance Senior Rust Engineer to help us build the next generation of private & secure messaging. If you’re interested in joining our team, please apply today! For friends of secure messaging 🥷, please share our post. join.com/companies/phoe…



Will 2024 be the year the public realizes Telegram is not a private & encrypted messenger?


I propose an alternative slogan for @FastlaneTools: "Just one more lane. That'll fix it."


In 2024, what are good European cloud providers? They must offer managed databases (postgres, redis) and possibly managed kubernetes.


I think the kitchen appliances from @SharkNinja are great, but the French translation of their recipes are really next level. I secretly hope they are handcrafted and a testament to how Americans view the French.

Tweet Image 1
Tweet Image 2
Tweet Image 3
Tweet Image 4

Great and nuanced thread about secure messaging:

Some folks are discussing what it means to be a “secure encrypted messaging app.” I think a lot of this discussion is shallow and in bad faith, but let’s talk about it a bit. Here’s a thread. 1/



Privacy leak in @wire: Sending read receipts is switched off on my end but I can still see read receipts from other people.

Tweet Image 1
Tweet Image 2

This is possibly the biggest downside of the Signal protocol. It is not new and it’s been an accepted risk since the beginning. With MLS we have a way to significantly improve the situation: the server can make sure everyone receives the same message without impacting privacy.

1/ An integrity issue with #WhatsApp and Signal Protocol 🧵 medium.com/@TalBeerySec/h… Users expect their chats’ history to be the same across all devices. However, we show that a rogue client can send different messages to the same user’s different devices



Raphael Robert Reposted

We attended the Real World Crypto Symposium in Toronto where @raphaelrobert talked about how far MLS has come since RWC 2019. Highlights: - Post-quantum resistance and how easy it is to upgrade from current schemes - Deployment in existing products like Webex and Discord (🧵1/2)

Tweet Image 1

Signal usernames are out, grab yours now!

Tweet Image 1

Raphael Robert Reposted

WhatsApp shared first details on how they will comply with the DMA. We are critical of the Signal protocol, as there has never been a complete specification that allows secure implementation of the protocol. This was one of the main reasons to develop MLS. netzpolitik.org/2024/interoper…


This is one of the reasons we are working on the virtual client extension for MLS: hiding how many devices users have and which one does a key rotation

So the overall point here, that E2E services leak a ton of metadata through key updates, is a good one. Same thing goes for Apple: you can more or less enumerate all devices if you reverse the Apple Directory Service APIs.



Raphael Robert Reposted

We ended 2023 with a talk at #37C3. @raphaelrobert and Konrad presented Messaging Layer Security (MLS). The room was packed and some people couldn't attend – luckily the talk is now online. 🍿 media.ccc.de/v/37c3-12064-r… #securemessaging #encryption #e2ee #messaginglayersecurity

Tweet Image 1

📣 Today at #37c3, 3:45pm, Konrad and I will give a talk in hall Zuse about Messaging Layer Security (MLS). They call it RFC 9420, we say MLS: A new IETF standard for end-to-end encryption, bringing improvements in performance and security. 👉 fahrplan.events.ccc.de/congress/2023/…


Raphael Robert Reposted

We are very excited to be at #37c3 in Hamburg after a long pandemic break. On day 3 (29.12., 3:45pm), @raphaelrobert and Konrad will give a talk on “RFC 9420 – or how to scale end-to-end encryption with Messaging Layer Security (MLS)” 👉 fahrplan.events.ccc.de/congress/2023/…

Tweet Image 1

Raphael Robert Reposted

Check out our blog post where we examine the push notification problem and address misconceptions! In the wake of recent reports on #surveillance via push notifications, many people have been confused how it affects their #privacy when using messengers. blog.phnx.im/privacy-of-pus…


Loading...

Something went wrong.


Something went wrong.