Support / questions about Lemmy.
Based on the comments so far, maybe something like this makes sense:
Warning: Private messages in Lemmy are not End-to-End encrypted, so the respective instance owners are technically able to read them. Please use a platform with E2E encryption for private messaging. Lemmy recommends Element.io and XMPP.
I think the larger point is that private messages are visible to instance admins.
Yes. And I think saying "messages in Lemmy are not End-to-End encrypted" is clearer communication than "messages in Lemmy are not secure".
I think both are bad communication. When I hear "messages are not end to end encrypted", I think that my ISP or a hacker might be able to see them but not, like, ordinary people. In reality, whatever shitheads are administrating either your or the recipients instances.
I think "private messages are visible to both your and the recipients instance administrators" would be more clear
Yes. Rather than focusing on encryption, (most normies don't know what that really means anyway) point out that admits not mods have access to all messages sent.
Messages between two people are not exposed via public APIs, but they can be accessed by admins of 1-2 servers (depending on whether you're sending these messages to someone on a different server).
Element fixes Lemmy's message content exposure problem, but none of the metadata problems (who is communicating with whom, when, how often, etc, are all still available to those 1-2 sets of server admins).
I agree. That's why I propose to clarify the wording.