I am interested in trying out matrix, but my first impression seems to reveal that by default, there may be some privacy or anonymity pitfalls if I use matrix.
Examples:
- using an instance I don't host means the host is trusted with my data
- self hosting might reveal a lot of information about me. Most likely, it is registered to a domain that has my info and could potentially be traced back to me.
- When self-hosting, being one of few users, basic analysis of my activity could reveal a lot about me, since all that activity could be easily identified as belonging to a single person
Now I understand not all threats could be mitigated, but my worry is that both self hosting or not have significant gaps. What's the most privacy and anonymity conscious way to use Matrix?
Trusting a third party with your data that is encrypted. Its better to blend in than to stand out. Use a instance with a fair amount of users , use anonymous username and email if they ask.
What about information like: who are the people I message, or the list of all group chats or public channels I am in? Is that encrypted?
I don't have the answer to those but one that I know protect you even more is SimpleX. You can listen to this podcast with the founder where he explains everything.
Opt Out: SimpleX chat and how privacy aligns with the future of computing w/ Evgeny from SimpleX
Episode webpage: https://optoutpod.com/episodes/s3e02-simplexchat/
Media file: https://www.buzzsprout.com/1790481/12333165-simplex-chat-and-how-privacy-aligns-with-the-future-of-computing-w-evgeny-from-simplex.mp3