I’m not sure if it is entirely accurate to compare them in this way, as “Matrix” refers to simply the protocol, whereas “Signal” could refer to the applications, server, and protocol. That being said, is there any fundamental difference in how the Matrix ecosystem of federated servers, and independently developed applications compares to that of Signal that would make it less secure, overall, to use?
The most obvious security vulnerability that I can think of is that the person you are communicating with (or, conceivably, oneself, as well) is using an insecure/compromised application that may be leaking information. I would assume that the underlying encryption of the data is rather trustworthy, and the added censorship resistance of federating the servers is a big plus. However, I do wonder if there are any issues with extra metadata generation, or usage tracking that could be seen as an opsec vulnerability for an individual. Signal, somewhat famously, when subpoenaed to hand over data, can only hand over the date that the account was created, and the last time it was used. What would happen if the authorities go after a Matrix user? What information about that user would they be able to gather?
Individual servers absolutely can be forced.
Not if they’re outside the country’s jurisdiction. The point is that a company that has a business entity in the UK is required to follow UK laws. This is why signal is shutting down in the UK.
A disorganisation run by volunteers in Japan can ignore the UK’s silly backdoor encryption laws; the UK has no legal authority over their servers.
And the Japanese government can force a backdoor into a server hosted in Japan. I don’t know what your point is or how it differs from what I said.
Governments can absolutely force backdoors into individual servers. The point you are making about the UK is true for any matrix servers hosted in or by a UK entity. It’s not isolated to Signal. It’s debatable if matrix clients will be legal to distribute in the UK after their law goes into effect.
So the community then moves the servet to Iceland.
The point is that they can’t shutdown a community-run disorganization’s sever because it can just move. Companies that profit from a region are beholdent to that region’s laws.
I don’t know what you are arguing. You are talking about things I haven’t said or claimed… And you refuse to address the points I do bring up.
What’s the point in talking to you if you arent going to participate?
I’m arguing that a disorganisation (eg community-run Matrix server) isn’t beholdent to the laws of a few silly countries, unlike a corporation (eg Signal)
And I’ve addressed all your points.