Site icon brushbeater

Security Chart of Messaging Apps

IntelTechniquesSecureE2EE CommsComparisonBeta v. 0.1October 2020                   
                         
MessagingConfideDustJitsiiMessageMatrix/ElementSessionSignalSudoTelegramThreemaWhatsAppWickrWireNotes          
E2EE Messaging (In-Network)YESYESYESYESOPTIONALYESYESYESYESYESPARTIAL*YESYES*Whatsapp cloud (Google) backups are not E2EE          
Country of OwnershipUSAUSAUSAUSAUKAustraliaUSAUSAUAESwitzerlandUSAUSAUSAMany other cloud backups (Google, iCloud, etc) may not be E2EE          
14-Eyes AssociationYESYESYESYESYESYESYESYESNONOYESYESYES           
Open SourceNONOYESNOYESYESYESNOYESPARTIALNOPARTIALYES           
3rd-Party MetadataYESYESYESYESNONONONOYESNOYESYESNO           
3rd-Party AnalyticsYESYESYESYESNONONONOYESNOYESYESNO           
FundingVariousMark Cuban8×8AppleMatrix/ElementLokiSignalAnonyome LabsVariousThreemaFacebookVariousWire           
Registration RequirementsNoneEmailNonePhone/EmailNoneNonePhoneNonePhonePaymentPhoneNoneEmail           
Device Contact AccessOptionalYESNOYESNONOYESOptionalYESNOOptionalOptionalNO           
Message Control Across DevicesYESYESYESNOYESNONOYESYESNOYESYESYES           
Ephemeral MessagesYESYESYESNONOYESYESYESYESYESYESYESYES           
User ID FormatMember IDEmailNamePhone/EmailUsernameUsernamePhonePhonePhoneUsernamePhoneUsernameUsername           
Free Version AvailableYESYESYESYESYESYESYESYESYESNOYESYESYES           
Desktop/Browser AvailabilityYESNOYESYESYESYESYESYESYESYESYESYESYES           
Third-Party AuditYESNONONONOIn ProgressYESNon-PublicNOYESNONon-PublicYES           
                         
EmailCTemplarDiscreetMailboxPosteoProtonmailTutanotaSudo                 
E2EE (In-Network)YESYESYESYESYESYESYES                 
E2EE (Non-Network)YESNOYESYESYESYESNO                 
Country of OwnershipIcelandCzech RepublicGermanyGermanySwitzerlandGermanyUSA                 
14-Eyes AssociationNONOYESYESNOYESYES                 
Open SourceYESNOYESYESYESYESNO                 
3rd-Party MetadataNONOYESNONONONO                 
3rd-Party AnalyticsNONOYESNONONONO                 
FundingSelf FundedSelf FundedSelf FundedSelf FundedHorizonSelf FundedAnonyome Labs                 
Registration RequirementsNoneNonePaymentPaymentNoneNoneNone                 
Free Tier Daily Email Limit20010010 (Trial)YES150YESNO                 
Custom DomainYESYESYESNOYESYESNO                 
WildcardsYESNOYESNOYESYESNO                 
2FAYESYESYESYESYESYESYES                 
Desktop/Browser AvailabilityYESYESYESYESYESYESYES                 
Third-Party AuditNONONOYESYESNONon-Public                 
                         
VoiceFaceTimeJitsiMatrix/ElementSignalSudoTelegramThreemaWhatsAppWickrWire              
E2EE Calls (In-Network)YESYESYESYESYESYESYESYESYESYES              
Country of OwnershipUSAUSAUKUSAUSAUAESwitzerlandUSAUSAUSA              
14-Eyes AssociationYESYESYESYESYESNONOYESYESYES              
Open SourceNOYESYESYESNOYESPARTIALNOPARTIALYES              
3rd-Party MetadataYESYESNONONOYESNOYESYESNO              
3rd-Party AnalyticsYESYESNONONOYESNOYESYESNO              
FundingApple8×8Matrix.orgSignalAnonyome LabsVariousThreema GmbHFacebookVariousWire              
Registration RequirementsPhone/EmailNoneNonePhoneNonePhonePaymentPhoneNoneEmail              
Device Contact AccessYESNONOYESOptionalYESNOOptionalOptionalNO              
Max # of Users on Call (Base Tier)32751:11:11:11:11:181:14              
User ID FormatPhone/EmailNameUsernamePhonePhonePhoneUsernamePhoneUsernameUsername              
Desktop/Browser AvailabilityYESYESYESYESNOYESNO (Voice)YESYESYES              
Third-Party AuditNONONOYESNon-PublicNOYESNONon-PublicYES              
                         
VideoFaceTimeJitsiMatrix/ElementSignalSudoTelegramThreemaWhatsAppWickrWireZoom             
E2EE Video (In-Network)YESYESYESYESYESYESYESYESYESYESPARTIAL             
Country of OwnershipUSAUSAUKUSAUSAUAESwitzerlandUSAUSAUSAUSA             
14-Eyes AssociationYESYESYESYESYESNONOYESYESYESYES             
Open SourceNOYESYESYESNOYESPARTIALNOPARTIALYESNO             
3rd-Party MetadataYESYESNONONOYESNOYESYESNOYES             
3rd-Party AnalyticsYESYESNONONOYESNOYESYESNOYES             
FundingApple8×8Matrix.orgSignalAnonyome LabsVariousThreema GmbHFacebookVariousWireVarious             
Registration RequirementsPhone/EmailNoneNonePhoneNonePhonePaymentPhoneNoneEmailEmail             
Device Contact AccessYESNONOYESOptionalYESNOOptionalOptionalNOOptional             
Max # of Users on Call (Base Tier)32751:11:11:11:11:181:14100             
User ID FormatPhone/EmailNameUsernamePhonePhonePhoneUsernamePhoneUsernameUsernameEmail             
Desktop/Browser AvailabilityYESYESYESYESNOYESNO (Video)YESYESYESYES             
Third-Party AuditNONONOYESNon-PublicNOYESNONon-PublicYESNO             
                         
Contributors: Gustov, Up, X, MB 

Coming from IntelliTechniques, this is a comparison chart of the various ‘secure’ messaging apps out there, including mobile apps and email services. The top of the list is (not shockingly): Signal and Wire for messaging and Tutanota and Protonmail for email.

As I discussed in Radio Contra Episode 31, setting up a wifi-only device for communications is absolutely critical at this point in time.

Exit mobile version