Hello, I would like to hear your opinions about a good selfhosted messenger like discord.

To list exactly what I mean by that is:

  • No need for federation ( only will be used by friends )
  • E2EE
  • Support for direct messages
  • Support for discord like server management by which I mean the ability to set rooms and topics for such rooms.

From what I know, this seems to be more similar to slack alternative’s but wanted to hear opinions of others.

I have been thinking about either matrix, mattermost, rocket.chat or revolt chat.

I already have a XMPP server, but setting up encryption and client’s has turned away quite a few people I would like to get onto this platform.

EDIT: As pointed by other people E2EE isn’t needed for my usecase if no federation.

  • MangoPenguin@lemmy.blahaj.zoneEnglish
    201·
    8 months ago

    Do you even need E2EE if it’s a private server with no federation? It seems like transport encryption would be fine which almost everything has.

    • BearOfaTime@lemm.eeEnglish
      42·
      8 months ago

      It still has to transit networks, and I’m assuming they’re using the internet.

      Anymore, all comms (even local), should be encrypted.

    • CronyAkatsuki@lemmy.cronyakatsuki.xyzOPEnglish
      10·
      8 months ago

      That’s a fine but, as long as the server was hosted at my personal devices, which it isn’t but on a hetzner dedicated box. Which is still better than on shared pc’s.

      Don’t really need it, it’s just nice to have.

      • Vent@lemm.eeEnglish
        4·
        8 months ago

        If you’re worried about unauthorized access to the physical machine, you could always just do disk-level encryption instead or store the app’s data in something like a Veracrypt virtual disk. They’d still be able to access the data if they go through your OS/user, but wouldn’t pick anything up by accessing the drive directly.

        Nothing short of E2EE can truly stop someone from accessing your data if they have physical access to the server, but disk encryption would require a targeted attack to break, and no host is wasting their time targeting your meme server. I seriously doubt they’d access it even if you had no encryption at all, since if they get caught doing that they’d get in a heap of legal trouble and lose a ton of business.