I want to selfhost a messaging service for my family. It should be secure and have voice calling option, ideally. Thank you.

  • z3bra
    link
    fedilink
    21 year ago

    From my experience (with Dendrite, not synapse, so keep that in mind), bridges create “fake” users to replicate your contacts on these platform as matrix users, and they are visible on the whole instance by all their users (but you might not be able to talk to them). Also, in puppeted mode (which is what you want to “replace” your app with matrix), only a single user can use the bridge at a time, so the other users cannot use it.

    • Scott
      link
      fedilink
      11 year ago

      This is true but if you’re self-hosting it’s not that much bother to add additional copies of a bridge for other users (granted, it’s not ideal).

      • z3bra
        link
        fedilink
        01 year ago

        Bridges were not that easy to manage in my case (regarding process management, and ease of config deployment/reproductibility). It was on OpenBSD though, so your mileage may vary. And still, it leaks all of your contact informations to the other users of the server (like their phone number eventually), so definitely not suited for public instances.

          • z3bra
            link
            fedilink
            21 year ago

            That’s from my own experience. I had a self-hosted matrix server running with Dendrite, and the mautrix-whatsapp bridge running. The bridge was running in puppeted mode, so upon synchronizing contacts, the bridge created “fake” users on the matrix server, one for each of my whatsapp contacts. The matrix username of these contacts is (by default) whatsapp_<phone_number>:domain.tld. And these users are visible (at least) by other users on the same server. It was my own instance and I was the sole user so I didn’t really care. But when a friend of mine wanted to try matrix, I created an account for him on the server, and when he joined, he could see all the fake whatsapp/telegram/discord users created by the bridge on the server. And as the default username includes the phone number, he basically had access to my whole phone contact list in real time.