Is there a given reason for this? Is it something they’re working on changing? I know very little about cybersecurity, but that sounds like a suboptimal situation.
There are efforts to encrypt more information and metadata, and to reduce the extent metadata can be correlated
The primary reason that things aren’t encrypted is to allow the server to perform necessary parts of the protocol, like deciding who is in a room, what the title of the room is and to whom should messages be delivered.
Read receipts aren’t end to end encrypted.
Reactions aren’t either.
You should be able to disable it clientside.
What the fuck?
Basically the only thing actually encrypted in matrix e2e are the message contents itself. All other possible types of associated metadata, aren’t.
Is there a given reason for this? Is it something they’re working on changing? I know very little about cybersecurity, but that sounds like a suboptimal situation.
I wonder if something like onion routing could be helpful?
Good to know, thanks!