←back to thread

Riot is now Element

(element.io)
550 points J_tt | 2 comments | 15 Jul 20 07:07 UTC | HN request time: 0.489s | source
Show context
x87678r ◴[15 Jul 20 12:27 UTC] No.23844181[source]▶
I still dont understand why Slack is popular when there is a free open source solution matrix/riot/element that works just as well.
replies(8): >>23844365 #>>23844384 #>>23844400 #>>23844455 #>>23844579 #>>23844844 #>>23845119 #>>23846019 #
marcinzm ◴[15 Jul 20 13:24 UTC] No.23844844[source]▶
Slack and Matrix solve different problems. Slack is "a company wants it's employees and select outside parties to communicate with themselves." Matrix is "we want everyone to communicate with each other." A broader solution is almost always less efficient for a specific constrained sub-problem.

For example, a Slack instance can be configured to log every conversation (including DMs) for audit purposes by company admins. Matrix enforces e2e encryption for peer-to-peer conversations and I believe disabling room encryption requires code changes.

replies(1): >>23847663 #
1. amandine ◴[15 Jul 20 16:35 UTC] No.23847663[source]▶
You can disable e2e on your server if you wish so. The option already exists in Synapse and it is part of Element Matrix Services customers.

For those who are legally required to be on record, there are other ways to keep track of the conversations for audit purposes without compromising the e2e encryption. For example, every room could have an audit bot invited by default, visible by the users, and which would record everything being said. Then you can setup the access to the logs from the audit bot to only be unencrypted in certain conditions, e.g. if the 2 halves of a key giving access to the account are put together. It's secure, clear for the users and legally compliant.

[disclaimer: I'm from the Element team]

replies(1): >>23847997 #
2. marcinzm ◴[15 Jul 20 16:57 UTC] No.23847997[source]▶
Your comment reinforces my initial point: "A broader solution is almost always less efficient for a specific constrained sub-problem."

It all sounds very complicated compared to paying a bit of money and toggling a setting. For example, googling for "elements/riot/matrix audit bot" results in no pertinent results from what I can tell. Being possible is not the same thing as being easy to use.

edit: Also companies don't care about being clear to users except as legally required or beneficial to the company. Employees not being constantly aware that they're being watched all the time is a positive and not a negative.