tulir / gomuks

A terminal based Matrix client written in Go.
https://maunium.net/go/gomuks
GNU Affero General Public License v3.0
1.34k stars 120 forks source link

olm security issues path forward #463

Closed heywoodlh closed 1 month ago

heywoodlh commented 1 month ago

As I am sure most tech-savvy Matrix users are aware, some security issues were recently disclosed regarding OLM: https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library/

My understanding is that the Matrix team's official position is to stop using libolm in favor of vodozemac (and per the above linked issues): https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985

As an extremely satisfied Gomuks user, I'm wondering if there's any path forward for switching to vodozemac over olm? I'd be disappointed to have to use Element exclusively for a less-vulnerable experience.

tulir commented 1 month ago

See https://github.com/mautrix/go/issues/262

heywoodlh commented 1 month ago

Thanks, it was difficult to find anything relevant about this, I appreciate the pointer.