simplexmq

It doesn't sound like SimpleX solves this either [0]: > There is still a risk that a server maliciously records all queues and messages (even though encrypted) sent via the same transport connection to gain a partial knowledge of the user’s communications graph and other meta-data. [0]: https://github.com/simplex-chat/simplexmq/blob/master/protoc...

> On Android, however, this is not as easy or straightforward and I cannot think of a way to do this, to be honest. That is why I prefer these programs to have Tor bundled and run the hidden service by themselves with a hardened-enough torrc. Ricochet does this on desktop, which I think is the right way to go about this. SimpleX's server (https://github.com/simplex-chat/simplexmq) should do this. What I do is run Wireguard on my server with a Tor daemon, connect to the WG network on my phone and then access the SOCKS and DNS proxies the Tor daemon exposes. That way there is no need for Orbot or running Tor on Android at all.

Yeah, I figured it out. I think I am supposed to do this: run a hidden service and a SimpleX server that uses the hidden service's port, and then use the hidden service's hostname as my SMP server that I set within the app. On Android, however, this is not as easy or straightforward and I cannot think of a way to do this, to be honest. That is why I prefer these programs to have Tor bundled and run the hidden service by themselves with a hardened-enough torrc. Ricochet does this on desktop, which I think is the right way to go about this. SimpleX's server (https://github.com/simplex-chat/simplexmq) should do this.

Agree with your post, but do want to point out that using private message routing on SimpleX theoretically hides your IP address from the server[1]. Similarly, built-in routing over Tor can make performing correlation attacks difficult for some adversaries, and if you elect to use your own .onion servers instead of the official ones, it adds another layer of obfuscation. [1] https://github.com/simplex-chat/simplexmq/blob/stable/protoc...

Differences between Cwtch, and SimpleX? Which are you leaning towards to and why? According to https://github.com/simplex-chat/simplexmq/blob/stable/protoc...: > identify that and when a user is using SimpleX. Does this apply to Cwtch? Also, is it not possible to obfsucate this traffic? Tor with obfs4? Related: #1 - https://security.stackexchange.com/questions/241730/traffic-... #2 - https://github.com/simplex-chat/simplex-chat/issues/4300 #3 - https://github.com/tst-race/race-docs/blob/main/race-channel...

Technical description: https://github.com/simplex-chat/simplexmq/blob/master/protoc...