Currently on an enjoyable journey of de-googling, upping privacy, data sovereignty and so on.

Apps that do this just get it.

  • WhyJiffie@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    3
    ·
    9 hours ago

    wait, I think maybe there is a misunderstanding in what happened in other apps. you are referring to the signal notifications thing, right?

      • WhyJiffie@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        30 minutes ago

        one more thing: its not actually irrelevant for privacy whether lemmy sends our public comments across google’s push service. we are not anonymous, but we don’t use real names either so it’s partially private, but when google connects your notifications (or just the timestamp of them with comments here), they will be able to figure out what is your account. they can use that information for stalker marketing or give it to the authorities later on

      • WhyJiffie@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        35 minutes ago

        ok. push notifications don’t universally leak your data. apps can receive either the message contents in the push notification, which is unsafe (less so if encrypted), or a ping that there is some kind of a new notification, upon which the app can connect to the server to fetch them. Popular messaging apps probably do the former for some reason. in mattermost its configurable by the server operator but defaults to leaking data. safe messaging apps don’t do this, they just send an empty notification or such, and the app checks in for updates. signal and matrix are like that, but in both cases they wouldn’t even be able to send the message when it is encrypted.

        but back to voyager: to be able to use push notifications, the server needs to send them. Lemmy does not have the capability for that, probably not even in the 1.0 version they are working on. so the way for Voyager to fetch notifications is to check in periodically instead of using a push service.