A New Kind of Instant Messaging
tox.chat
Whether it's corporations or governments, there's just too much digital spying going on today. Tox is an easy to use application that connects you with friends and family without anyone else listening in. While other big-name services require you to pay for features, Tox is totally free and comes without advertising — forever.

I’ve seen a lot of talk about privacy minded chat clients on here but a search did not bring up Tox. I have been delving into the Gemini protocol ( https://gemini.circumlunar.space/) and a few folks there have listed Tox for contact. Anyone have thoughts on this?

It’s encrypted, peer to peer, FOSS, and requires no signup.

    • jackalope@lemmy.ml
      2·
      3 years ago

      By “doesn’t support multi-device” you mean it doesn’t have syncing between devices?

      That’s kind of a big deal for me.

    • Gritty@lemmy.mlOP
      1·
      3 years ago

      Thanks for the insight! No offline messages is a big drawback, however aTox from Fdroid seems to have the service running all the time unless you kill it. Battery drain aside I think this could help. No multi device support is a big one though.

      Yeah Gemini is cool. Big gopher hole right now for me.

  • unnecessarily@lemmy.ml
    3·
    3 years ago

    If you’re interested in the concept behind Tox, I’d recommend taking a look at Jami. Tox’s development has been sporadic at best and I wouldn’t trust it to be a viable solution long-term. Jami runs with the same concept but has multi-device support and is backed by/part of the GNU project so it probably has more staying power. That being said, it’s still (like Tox) not very user friendly at this point.

  • drone621@lemmy.ml
    2·
    3 years ago

    I tried using this, admittedly a while ago, for two months. It flat out could not deliver messages reliably to someone in the same household. Sometimes messages would arrive weeks after being sent, and sometimes nothing would arrive at all. Maybe it’s changed since, but I doubt it.

  • Joe Bidet@lemmy.ml
    2·
    3 years ago

    I cannot find that page again as it as obviously been fixed since, but i remember looking at Tox a long while ago and running away scared and laughing at the same time.

    On some installation page (on a wiki!!) it used to recommend (from memory) something like “wget --ignore-certificate https://blah.blah/blah.sh | sudo sh”

    My immediate reaction was that i wouldn’t take seriously anything related to security from ppl recommending such insanely sloppy and insecure methods…

    • federico3@lemmy.ml
      1·
      3 years ago

      The whole approach to security of Tox was very questionable since the beginning. Tox even hinted at being able to withstand attacks from nation-states (see below), while at the same time it was not audited by 3rd parties and had no clear description of their threat model. A number of question and bug reports where quickly dismissed.

      “Whether it’s corporations or governments, digital surveillance today is widespread. Tox is easy-to-use software that connects you with friends and family without anyone else listening in.”.

  • Lynda@lemmy.ml
    21·
    3 years ago

    Many of the top tier messaging platforms are trying to solve today’s problems and vulnerabilities. I like that Tox does not require a huge centralized infrastructure (only DHT) and is P2P. Tox is very fast and works well over Tor too. However, P2P, DHT, and limited infrastructure has it’s own challenges.

    I think Session and Status.im are better positioned.

  • CHEF-KOCH@lemmy.ml
    21·
    3 years ago

    Maintainer stole money from the project ever since then it died with it + no audit. Main reason why I unlisted it from my privacy project.

    Lots of baseless clames and whatnot, more hype around it which is not worth it.

    • Gritty@lemmy.mlOP
      1·
      3 years ago

      So besides the management you’re saying the software itself could be viable?

      • CHEF-KOCH@lemmy.ml
        21·
        3 years ago

        Sure, as said I would use it myself instead of Element. The project always had potential and was underestimated since day one. People donated in the hope to improve the known issues + get an audit, sadly that day never came and after the shit-show that happened people lost trust.

        It is not perfect, same like Element it has flaws but they are fixable with some help and effort.