With Keybase being owned by Zoom now, I'm looking for a good alternative to exchange messages securely. Ideally, I would like to find something that has as many of the following features:<p><pre><code> * strongly encrypted
* open source
* distributed, or at least not requiring a hosted service
</code></pre>
Any good suggestions?
I don't know your risk profile. I do know that the most experienced security professionals work for nation states and are motivated by patriotism and money and professional pride. Because the stakes are as high as stakes get, they have the biggest budgets too.<p>Assuming that cryptographic math claims of widely used algorithms are true, as a basic matter of professional competence, these security actors have incentives to compromise implementations. It's tanks against crossbows. At best.<p>If you are asking, it's probably more like tanks against a reader of books on crossbows. Being clever enough to thwart a lone wolf in a hoodie doesn't scale to actors who can compromise hosted services in ways that the service stays up and the service doesn't discuss the compromise.<p>When push comes to shove those professionals apply wrenches. All ordinary security is theater. But ordinarily theater is enough and anyway that's all ordinary people can afford. Good luck.