SimpleX Chat

Cider9986 23 points 13 comments March 27, 2026
simplex.chat · View on Hacker News

Discussion Highlights (7 comments)

john_strinlai

> World's Most Secure Messaging immediate eye roll. marketing thinks it is doing a favor here, but for anyone who really cares, this is just produces sighs. https://simplex.chat/security/ at least has Trail of Bits audits from 2022 & 2024. but then they say "We are planning implementation security assessment in early 2025." which is not linked, so it is unclear if it was never done or the security page has not been updated in a year. either case is bad. > To hide your IP address from the servers, you can connect to SimpleX servers via Tor. thats one hell of a caveat to sneak into the last sentence of a "learn more" popup >" SimpleX has no identifiers assigned to the users -- not even random numbers" which is later revealed to be pairwise pseudonymous identifiers . oh, and apparently your ip address, unless you use tor.

thisisauserid

I heard that Simplex-2 will go even more viral.

uniq7

It is a red flag that in the "SimpleX Roadmap to Free Internet" section they refer to 2024 as "Now" and they explain their expansion plans for 2025 as something in the future. It is weird that this is in the home page of their official web site.

jayd16

Can you chat in both directions or is simplex uni-directional?

embedding-shape

> World's Most Secure Messaging Very strong claim, and the link takes you to https://simplex.chat/messaging/ which again has a lot of strong claims, but where is the evidence of this? Where is the evidence of this being "more secure" (for who? For what threats?) than say Signal or even Telegram or Whatsapp? Signal themselves provide evidence of their claims, where are SimpleX providing their evidence?

rickcarlino

I’ve been using SimpleX for a small circle of friends and it has been pretty easy to use. I am surprised it has not seen wider adoption. Writing scripts for it is also straightforward.

jryio

It's exhausting to make this comment every time... but here we go. Key revocation is table stakes for secure messaging. I need a trusted way to relay that my contact's key has been revoked and I should stop trusting it. Neither P2P, TLS, client-server, or any choice of key curve gives you this. Read the whitepaper, no mention of revocation. Correct me if I missed something.

Semantic search powered by Rivestack pgvector
3,471 stories · 32,344 chunks indexed