Phoenix R&D

New release: Air v0.23.0 Air is a new private messenger based on the Messaging Layer Security (MLS) protocol. ✨️ New features: - New "Notes to self" chat - Contact requests from the same user are now aggregated - Localization in Ukrainian, Russian, and Chinese

New release: Air v0.22.0 Air is a new private messenger based on the Messaging Layer Security (MLS) protocol. ✨️ New features: - Animated image behavior can now be changed - Warning for expired versions of the app

New release: Air v0.21.0 Air is a new private messenger based on the Messaging Layer Security (MLS) protocol. Invite-only for now. ✨️ New features: - Share images and text into Air from other apps (iOS and Android) - Spanish and Portuguese translations - System messages are now translated

New release: Air v0.20.0 Air is a new private messenger based on the Messaging Layer Security (MLS) protocol. Invite-only for now. ✨️ New features: - Many design changes to prepare for desktop support - More preparation for multi-client support - Notifications are grouped (Android)

New release: Air v0.18.0 Air is a new private messenger based on the Messaging Layer Security (MLS) protocol. Invite-only for now. ✨️ New features: - You can now mute chats - Preparation work for multi-device

We’re hosting a casual community get-together for friends of Air. If you’re in Berlin on Wednesday 24, feel free to swing by and meet other Air users and our team. We look forward to seeing you! 👋

OpenMLS, our implementation of the Messaging Layer Security (MLS) protocol, has undergone a security audit conducted by @srlabs.bsky.social and sponsored by the @sovereign.tech. The security audit marks an important step toward making OpenMLS more secure. More details in our blog post:

We will be at @re-publica.com over the next 3 days and brought some invitation codes for Air! ✨ Reach out to @julianmair.com if you’d like to get early access to Air. #rp26

🚨Der vorgelegte Gesetzentwurf zur "IP-Adressspeicherung" geht weit über vergangene Gesetzesentwürfe hinaus, die von deutschen und europäischen Gerichten als verfassungswidrig eingestuft wurden, und läuft völlig der eigentlichen Idee von Datenschutz und Datenminimierung zuwider.

We will be at #FOSDEM and will bring something exciting: Invitation codes for the beta phase of @air.ms, our new secure messenger based on MLS! ✨ Hit @julianmair.com up if you’d like to join the beta with your friends.

We will be at #39C3 and we brought something exciting: Invitation codes for the beta phase of Air, our new secure messenger based on MLS! ✨ Hit us up if you’d like to join the beta with your friends. You can also follow @air.ms, where we’ll post updates over time.

🚨 Der Gesetzentwurf zur #Chatkontrolle sieht vor, dass digitale Kommunikation einschließlich verschlüsselter Nachrichten und Fotos gescannt werden soll. Wir haben uns an die deutsche Bundesregierung gewandt, sich am 14. Oktober gegen den Gesetzesvorschlag der Chatkontrolle auszusprechen.

We did a thing. We combined TLS and MLS into a hybrid protocol. Why? Because sometimes you need connections that last for weeks, quantum-resistant security, or simpler certificates. The experiment is open-source. Here's the story 👇

We are #hiring a Freelance Junior Product Manager to help us build the next generation of private & secure messaging. If you’re interested in joining our team, please apply today! For friends of secure messaging 🥷, please share our post with potential candidates.

Happy to announce that I’ll be speaking at @passthesaltcon.bsky.social on July 2nd! I’ll discuss end-to-end encryption with MLS, the growing MLS ecosystem, the MIMI IETF working group, and metadata protection. It’s my first time attending, and I look forward to connecting with the French community!

The MLS Architecture document – the companion document to the MLS Protocol document – is now finally available as RFC 9750: www.rfc-editor.org/info/rfc9750

MLS is efficient, but what does that mean in practice? This paper sheds some light on the question by building a test framework for OpenMLS. arxiv.org/pdf/2502.18303

We are happy @opentechfund.bsky.social is supporting our mission to bridge the gap in the secure messenger space by developing a new technological foundation for secure and private messaging that combines functional, privacy, and security features in a way that addresses a variety of threat models.

This weekend, @raphaelrobert.bsky.social and @julianmair.com are joining the #GlobalGathering. We will be hosting a booth and circle on Saturday to discuss the current state of privacy preserving and decentralized messengers. We look forward to seeing you at there! Feel free to ping us!

We #hiring a full-time and a freelance Senior Rust Engineer to help us build the next generation of private & secure messaging. If you’re interested in joining our team, please apply today! For friends of secure messaging 🥷, please share our post with potential candidates.

WhatsApp shared first details on how they will comply with the #DMA. We are critical of the Signal protocol, as there has never been a complete specification that allows secure implementation of the protocol. This was one of the main reasons to develop MLS. Our conversation with @netzpolitik.org👇

In case you missed our talk about Messaging Layer Security (MLS) at #37C3, you can re-watch it now. MLS brings substantial improvements in performance and security compared to existing protocols. #securemessaging #encryption #e2ee #messaginglayersecurity

We ended 2023 with a talk at #37C3. @raphaelrobert.bsky.social and Konrad presented Messaging Layer Security (MLS). The room was packed and some people couldn't attend – luckily the talk is now online. 🍿 media.ccc.de/v/37c3-12064... #securemessaging #encryption #e2ee #messaginglayersecurity

Today at #37c3, 3:45pm, Konrad and I will give a talk in hall Zuse about Messaging Layer Security (MLS). They call it RFC 9420, we say MLS: A new IETF standard for end-to-end encryption, bringing improvements in performance and security. 👉 fahrplan.events.ccc.de/congress/202...

After @netzpolitik.org’s recent investigation into surveillance through push notifications, many people have been concerned about how their own privacy is affected when using messengers anonymously. In this blog post we examined the problem and what to do about it. Check it out 👇

Check out our blog post where we examine the push notification problem and address potential misconceptions! In the wake of recent reports on surveillance via push notifications, many people have been confused about it and how it affects their own privacy when using messengers anonymously.

First impactful measure following last week's splash about push notification surveillance: www.reuters.com/technology/a...

Let's make this crystal clear: If you think you are anonymous because you - used a throwaway number for Signal - picked a completely random username for Wire/Matrix - were given a random username with Threema/Session YOU ARE NOT! You can be identified by the push tokens.

This has been bothering me for a while and I'm glad there's finally more discussion about this. Push notifications are a problem for privacy, we need more transparency and changes in the way they work. netzpolitik.org/2023/push-di...

After #chatcontrol, lawmakers are now trying to mandate government-controlled certificates in browsers. Along with 400 experts and researchers from around the world, our Head of Research Konrad Kohbrok has signed an open letter to abandon the #eIDAS plans. eidas-open-letter.org