Raphael Robert

I had to see for myself

Combining TLS and MLS: An experiment We did a thing. We combined TLS and MLS into a hybrid protocol. Of course, when things get serious, full names are in order: We combined the Transport Layer Security protocol and the Messaging Layer S...

We did a thing. We combined TLS and MLS into a hybrid protocol.

Why? Because sometimes you need connections that last for weeks, quantum-resistant security, or simpler certificates.

The experiment is open-source. Here's the story 👇

We really did do a thing.

Phoenix R&D (Remote): Freelance Junior Product Manager (all genders, part-time) Phoenix R&D GmbH has a remote job opening for Freelance Junior Product Manager (all genders, part-time) (published: 15.05.2025). Apply now or check the other available jobs.

We are #hiring a Freelance Junior Product Manager to help us build the next generation of private & secure messaging.

If you’re interested in joining our team, please apply today!
For friends of secure messaging 🥷, please share our post with potential candidates.

Happy to announce that I’ll be speaking at @passthesaltcon.bsky.social on July 2nd!

I’ll discuss end-to-end encryption with MLS, the growing MLS ecosystem, the MIMI IETF working group, and metadata protection.
It’s my first time attending, and I look forward to connecting with the French community!

The idea that you can just “teach computer science” and be apolitical is a beautiful dream that expired in the 2000s, at the latest. Computer science has re-organized every facet of our society: it is inherently political. Instead of taking this idea seriously, we ran from it. Now we live in hell.

It's an informational draft, so I think it cannot use normative language, but adding @mallory.techpolicy.social.ap.brid.gy and @claucece.bsky.social who actually wrote this.

There has been an attempt by Knodel et al to have a more rigorous definition over at the IETF: www.ietf.org/archive/id/d...

Mike Waltz Accidentally Reveals Obscure App the Government Is Using to Archive Signal Messages A photograph of Trump administration official Mike Waltz's phone shows him using an unofficial version of Signal designed to archive messages during a cabinet meeting.

www.404media.co/mike-waltz-a...

Hey Google designers, are we sure about this new layout logo in Google Meet?

The negative space around the boxes reminds me of something.

The MLS Architecture document – the companion document to the MLS Protocol document – is now finally available as RFC 9750:

www.rfc-editor.org/info/rfc9750

And so it begins, BlueSky complies with censorship requests of an authoritarian regime

The Dangers of End-to-End Encryption Privacy Guides is formally taking a stand against dangerous and frightening technologies.

www.privacyguides.org/articles/202...

This might indeed be interesting to inform decisions about the frequency of commits. Our DS design is pretty set already, but it would be interesting to compare the details.

MLS is efficient, but what does that mean in practice?

This paper sheds some light on the question by building a test framework for OpenMLS.

arxiv.org/pdf/2502.18303

… and now it looks like Apple caved, while Google didn’t: www.forbes.com/sites/zakdof...

The SCW podcast team does it again and breaks down a newish, complex and alarming topic into palatable and informative pieces. Excellent questions from @durumcrustulum.com and @dadrian.io expertly answered by @josephhall.org and @matthewdgreen.bsky.social.

Listen to it if you have time!

The latter is exactly what Apple could have done. Signal for example took that stance. And even WhatsApp did, IIRC.

Apple pulls data protection tool after UK government security row Customers' photos and documents stored online will no longer be protected by end to end encryption.

I’m deeply disappointed in Apple.

www.bbc.com/news/article...

Thanks for updating the blog post!

We proudly signed this too. Always push back.

I love that @kagi.com now uses Privacy Pass.

It would have been nice to get some credit since your "own implementation" looks like a wrapper around my implementation.

blog.kagi.com/kagi-privacy...

AI. Chances are your average crypto bro is already an AI bro.

Another example of how legal interception of private communication cannot be limited to the “good guys”:

www.cisa.gov/news-events/...

Hey new followers! I hope this will become what Twitter once was – it's already starting to feel that way. Looking forward to better conversations!

PS: Mastodon is still as valid as it was before.

This weekend, @raphaelrobert.bsky.social and @julianmair.com are joining the #GlobalGathering.

We will be hosting a booth and circle on Saturday to discuss the current state of privacy preserving and decentralized messengers.

We look forward to seeing you at there! Feel free to ping us!

Meet DAVE: Discord’s New End-to-End Encryption for Audio & Video We’re rolling out end-to-end encryption for voice and video calls! We’d like to share why we’re bringing E2EE A/V to Discord, share our design and implementation goals, and provide a high-level techni...

🔐 Discord introduces end-to-end encryption with Messaging Layer Security (MLS) 🔐

Im really happy to see another large scale MLS deployment. It shows the technology is fit for purpose, demonstrably so.

discord.com/blog/meet-da...

Yes, glad to see another large MLS deployment!

We are hiring two Rust engineers!

MLS works fine with federated servers. The MIMI IETF working group is working on exactly that. The only requirement is that messages are ordered by one server at a time.