Skip to main content


I am disappointed that @matrix didn't publish any response to the Soatok post.

At least to provide some context about
- Why was an insecure crypto implementation knowingly chosen for libolm?
- Why was the fact that libolm is potentially insecure not clearly communicated?
- Why was the crypto implementation not replaced sooner?
- Why is the ecosystem so slow to start using the Rust rewrite?
- Does the foundation plan to do anything about that?

#matrix #libolm

This entry was edited (2 months ago)
in reply to David

We will definitely be saying more about this as the dust settles. We believe responding in the heat of the moment to be counterproductive given the dynamics involved, and are also casting a wide net for further independent review so as to ensure we're not off base in our own assessment.
This entry was edited (2 months ago)