Tox: Decentralized and Encrypted Instant Messaging

  • It does the job, and it isn't centralized. It "just works". Resource usage is also pretty low.

    I can't comprehend why this isn't widely used.

    I wish this was a thing _before_ crap like WhatsApp, Skype or Discord got so popular.

  • I think https://jami.net/ is a better solution and has a working mobile client.

  • Been using Jami because I thought the Tox project dead. Just loaded up six profiles from older version 1.16.3 (qtox 2019-05-08) on this new version (qtox 1.17.3) and they load OK but passwords don't work (except where they were embedded). Have good backups of them so they should.

    Just wondered if it's just me for some reason (no big deal as I wasn't using the program). Will reinstall older .exe and see what happens, same with earlier Android version (it uses the same old passwords).

  • How does this compare with, say, Matrix with P2P support?

  • Still no audit, right? Just “trust us, it's secure”. And afaik the authors don't have particular expertise in security.

    Edit: also, “it's secure, we use Nacl”: https://github.com/irungentoo/toxcore/issues/121

  • Does anyone know if this supports code snippets? We're currently using mattermost at work and it has great code and custom command support. But for that, we need to have domains, certificates and our own servers set up. I'm not the tech guy so I don't know if this kind of chat app would be better, but I think it would be great to have something that was P2P (no server requirements, certificates etc...) while being super secure.

  • Shouldn't the first question be who is paying for all this (also who's done an audit)? Remember CryptoAG, Potonmail claiming they don't log IPs etc.?

  • Android client by "evilcorp.ltd"? Maybe not the most reassuring name.

  • Tox is a neat idea, but (at least when I tried it) it would really kill battery life. I think this is kind of inherent to the design.

  • Tox is already a very popular testing tool in python, to the name is a bit confusing.

  • I prefer the decentralized messaging protocols that are incentivized by tokens. eg. Status / VacP2P (ethereum), Session (oxen), Sylo, etc.

    I know that a lot of people have opposite preference, but nothing is free, and tokens allow projects to create their own value, which I think is a very cool innovation.

    Afterall, it seems lack of funding is a main issue with Tox (can’t afford audit etc). So how else do you avoid being beholden to investors while also having resources?