"It's harder to shut down email than signal."

It took me two minutes to figure out DeltaChat connects to the server with SNI "nine.testrun.org". Banana dictatorships can trivially write firewall rules to cut those connections. There are other servers, but if those are going to be usable by anyone, they're going to have to be public, and writing block-rules is trivial compared to spinning up new servers.

I'm not saying Signal is much better in this regard, I'm just saying resilience isn't a useful metric to assess messenger security.

▲

em-bee a day ago | parent [-]

DeltaChat connects to the server with SNI "nine.testrun.org"

sounds like a bug that can be fixed. it should not need to make that connection unless you create an account on that server.

▲

maqp a day ago | parent [-]

No that's just the default behavior of connecting to default server, which is what 99.9% of users are going to do. You want to get rid of SNIs, you run a server dedicated for DeltaChat, and then its the IP-address can be blocked.

▲

em-bee a day ago | parent [-]

connecting to default server, which is what 99.9% of users are going to do.

not quite. the default server feature is only a year old. while deltachat itself goes back to at least 2017, so the majority of users will not be on that default server now, and it would be possible to offer a randomized selection to prevent one default server from dominating.

	▲	maqp 18 hours ago \| parent [-]
		Majority of new users will be. It's still a niche product. Also, I'm unsure if it's smart the client just picks a server for you at random. AFAIK this uses email as back-end so it's not like you can just swap your email address host like you can swap telco while keeping your phone number. One option would be to have the user first whitelist the email providers they'd trust, but most users usually prefer trusting the app vendor as they're trusting it with the client anyway.