Jitsi
With Jitsi you can also self-host the server-side components if that's your thing: https://jitsi.github.io/handbook/docs/devops-guide
From all of us who donate to FSF.org To the world
A Free-as-in-speech-and-beer solution
Happy Newton's birthday
SimpleX chat does video calls.
Thanks, I'm going to check this out. Seems pretty straightforward which is good for the family to use
Just for transparency reasons, you might want to see this: https://discuss.privacyguides.net/t/simplex-chat-is-now-a-crypto-project-selling-tokens-and-nfts/32490/9
I prefer Delta Chat, but sadly video calls are experimental :(
And also there is no support for group calls.
Thanks for the heads up. This may still be the best option for me, but it is good to stay ahead of these things.
There is something in the quoted Masto thread that suggests realtime video is inherently insecure? I have to be honest that I didn't really follow it.
The info from SimpleX reads as though they are using crypto donations rather than more traceable cash, which mostly makes sense to me. The NFT tech that they describe is not for trading purposes, but to anonymously verify payments. It would be used to connect an account to a payment through zero or minimal knowledge. I don't really understand the tech, so please let me know if I even understand what they are suggesting.
This is just for family chat, so total black box security is not a priority.
Thanks for the heads up
You're welcome
There is something in the quoted Masto thread that suggests realtime video is inherently insecure?
Well, to keep it simple: Voice/Video Calls on SimpleX are private. The point Sarah (from Cwtch, another private messaging platform) was making in that toot is that it is hard to be truly anonymous on a video call due to network level limitations on how the app route calls. But that is mostly about having privacy from a state-level adversary, I mean don't even worry about this.
The info from SimpleX reads as though they are using crypto donations rather than more traceable cash
The criticism on the Privacy Guides forum is about the SimpleX team implementing a system based on crypto and NFTs to pay server operators, aiming to incentivize people to host more servers. But the catch here is that server operators get a 60% cut and the SimpleX team takes 40%, raising concerns about a possible enshittification, SimpleX will be more inclined to generate revenue instead of improving the app and bla bla bla.
Also on the other thread that the highlighted comment linked, a developer I respect called ignoramous points out that because SimpleX is based in the UK, it could be subject to the IPA law and there are transparency concerns about the SimpleX team not even caring to warn about it (if you care about that stuff).
And also SimpleX advertises as not having user identifiers but that's a lie because by default if you don't do anything about it the servers have your IP address (and your IP is a user identifier).
It's these little things that make me distrust the project. Personally I don't like Web3/crypto stuff, so I tend to avoid services that implement it.
This is just for family chat, so total black box security is not a priority.
Yeah i mean, for your use case, using SimpleX is totally fine. I just wanted to share the criticisms that exist around SimpleX.
Thanks, I appreciate the detailed reply!
If you feel like setting up a stun/turn server it's possible to set up your own using something like xmpp or next cloud talk. Works for individual accounts with friends if not a plug and go app.
I have an ejabberd server setup for my family for this reason. Using the Conversations app off F-Droid and Gajim on desktops
Threema
It’s around $5 for the app. No phone number needed. End-to-end encryption for chat and calls (audio/video). Desktop versions are in beta.
iOS and Android
Strongly recommend against Threema. Thier initial "custom protocol" had a bunch of basic mistakes in it, and thier mitigation doesnt completely solve the biggest ones. The original details can be seen here: https://breakingthe3ma.app/ I can't find the original blog post that did a more thorough breakdown.
Ah, found the blog post with a thorough breakdown: https://soatok.blog/2021/11/05/threema-three-strikes-youre-out/
I’d love to see the blog post. Is there a date on that paper? How recent is this?
I’ve read about fixed vulnerabilities, but not outstanding ones.
This looks promising. I Like that it has group video as well. Thanks.
Heres a cool new phone company that require no personal info Phreeli
Phreeli is overpriced and doesn't actually grant much privacy despite their claims. Telecom providers can still have a field day with your location and sms/call data even if Phreeli isn't collecting that themselves, which is also really just a pinky promise at this point. There are also competing services already which don't require PII either but have more reasonable prices.
If you want a phone number just to sign up for signal or something just use jmp.chat smspool or mysudo depending on your needs.
This is good to know, thank you!
I'm also looking at https://www.cape.co/
FYI cape was founded by a former Palantir exec. Might just mean they know what they're doing but I'd say it's a yellow flag at least. Also the main compelling feature (IMSI rotation) is currently pretty experimental
https://www.cape.co/blog/product-feature-identifier-rotation
Good to know. Thanks for the info. I haven't jumped yet, since wanna do research. But I agree that that is a yellow flag.
self hosted matrix instance here
GNU Jami though I had trouble getting it to work reliably, and you have to install an app. YMMV.
Jitsi is decent, especially if you don't mind using their server meet.jit.si (may have changed by now). It uses WebRTC (i.e. you can use it with just a browser) which I think is preferable to a mobile app.
I think there will inherently be some lag if you're using a mobile phone at the client side, because of all the codecs, wifi latency etc.
This shouldn't be that hard a technical problem especially if you're ok with audio-only. I don't know why the existing programs all have probs in some areas. Jitsi is nice to use but a pain to self-host from what I can tell.
I have a self-hosted nextcloud that has a video chat feature (Nextcloud Talk) but it's not great.
I have been wanting to spend a chunk of time looking into the situation and finding a good answer, or at least identifying the trade-offs clearly.
NextCloud has end-to-end encrypted voice and video chat, and of course a whole bunch else, since people are mentioning self-hosting. The corresponding Android app "nextcloud talk".
Nextcloud talk does not support E2E on mobile, web client only. I was just setting it up the other day and was very surprised when I saw this.
It looks like Session has video calls in beta.
Note that most services requiring a phone number for registration don't actually require that phone number to be connected to a SIM card in the device you're using. That may be helpful depending on your use case.
Do not use Session. It isnt even vaguely secure. Two part blog post from the researcher that single handedly disproved Session was secure or had any interest in being secure:
https://soatok.blog/2025/01/14/dont-use-session-signal-fork/
https://soatok.blog/2025/01/20/session-round-2/
EDIT: Formatting
I don't know how private/secure it really is, but Teleguard doesn't require a phone number.
I'd really like to see some research into them, though, to know how good/bad it is.
I don't know where to even start.
Alternative: XMPP has been around for 25+ years, can be self-hosted, there's numerous solutions available.
Side note but I was literally just thinking the other day that the accelerated rise of corruption and right-wing pivot of the globe also coincides with encrypted / anonymous communications. Mobsters and state actors must be having an absolute field day this past decade.
If the Epstein files have proven anything, it's that these idiots use plain text email.
Not ideal, but I think Discord is offering E2EE for voice and video chat now.
Ask Lemmy
A Fediverse community for open-ended, thought provoking questions
Rules: (interactive)
1) Be nice and; have fun
Doxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them
2) All posts must end with a '?'
This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?
3) No spam
Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.
4) NSFW is okay, within reason
Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com.
NSFW comments should be restricted to posts tagged [NSFW].
5) This is not a support community.
It is not a place for 'how do I?', type questions.
If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.
6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online
Reminder: The terms of service apply here too.
Partnered Communities:
Logo design credit goes to: tubbadu