[Arathorn]

> Matrix defines a sort of end-to-end encryption, but the ends are homeservers and clients.

This is categorically untrue. Matrix’s E2EE is between clients; homeservers can not see plaintext in encrypted rooms, and all private rooms are encrypted by default these days.

The parent is completely confused.

[p-e-w]

It's simply amazing to see you personally answer almost every single Matrix-related question on almost every single Matrix-related HN thread. You're literally the mastermind behind the most important internet protocol since HTTP, and yet you don't consider it beneath you to correct such basic misconceptions that nobody who so much as skimmed the spec would have had in the first place. Bravo!

[ncmncm]

I am corrected.

[ncmncm]

Still, with so much app-level code running in the same process with the encryption layer, any bug in that compromises security.