Most users care more about contact discovery than privacy so it makes sense for them to implement it and unlike Signal, it uses #xmpp so everyone has the freedom to use any other app that doesn't require a phone number and you are still able communicate with everyone on Prav.
I think that Prav can be recommended to friends who are used to registering for different services using a number. Such people are not accustomed to unnecessary steps during registration.
I read the news where they wrote about the leak of numbers and verification codes in Signal. I don’t understand why this messenger doesn’t provide an alternative registration option.
Good question! Your perspective on that might differ a lot depending on how long you’ve been on the internet.
In recent years, every major messenger (WhatsApp, Telegram, Signal, …) has been doing it this way, linking your phone number to your identity, so your contacts are automatically discovered from your address book (and reciprocally, people who have your phone number already will find you easily and as soon as they install the app you recommended to them). If that’s all you’ve ever known, not only is that not a bug (or rather, a major privacy and identity linkage breach), that’s a convenient feature, and you kind of expect things to work that way. I personally don’t like that (and I’m aware of being a dying species).
Now, regarding Prav, please don’t use it (for the time being, at least). As far as I can tell, this is a fork of the Conversations/quicksy.im XMPP clients (Conversations being the original work, and Quicksy being a derivative by the same author using the phone number discovery / easy onboarding approach discussed here). Unlike the original which is very safe and reputable, whose author is known and very active within the XMPP/security communities, and whose hosted service has years and years of excellent service and uptime under its belt, this one comes out of nowhere, from an unknown contributor (afaict), has no funding model to suggest it being sustainable, and worse, no rationale as to why it exists in the first place (why would it be chosen over the original). So, my recommendation is to stick to those.
Back to the original question, thanks to Quicksy.im having been around for several long years already, the debate of having phone numbers being used for identification on XMPP is not really something new. Having been there for a very long time and seen the before/after, indeed this has enabled some of my current contacts (who were already users of other services like WhatsApp and certainly didn’t mind) to get on board a bit more easily. They are not the majority, so, and in all, I’m glad that the option exists, it’s not as big a deal as it might seem for XMPP in general.
@u_tamtam@Slow I'm part of Prav team and I have been promoting XMPP and #FreeSoftware for many years. I'm a long time Debian Developer and maintains gitlab in Debian. I'm part of the community maintaining many services to public including XMPP services at diasp.in and poddery.com Prav is just trying a different approach to running an XMPP service. Both poddery.com and diasp.in is fully volunteer driven and we are finding it difficult to get new volunteers.
To all the prav folks responding here, sorry if my message came up rubbing the wrong way, I didn’t mean to be diminutive or dismissive in any way. I am glad to see my questions answered, and I guess prav makes sense in the specific context that was mentioned. I only wish it was a little bit more explicit about what it is, what it is not, and whom it targets. I wish you good luck with your project :)
Add comment