I'm seeing "No e2e encrypted DMs" as one of the cons for most of these.. anyone have a solution?
---
Anyone wanting to know more about Olm & Matrix's Axolotl support might be interested to flip to the end of https://matrix.org/~matthew/2015-06-26%20Matrix%20Jardin%20E...
(p.s. hi!)
Are there any plans for formal standardisation, review or the like? The docs look cool but at this point I'm suspicious of any single-vendor cryptography.
The only obvious solution, right now, is running your own private server if you want private indexes.
But the One True Way to solve this problem, in the fullness of time, is for every enterprise to run their own little PaaS with a standard API, and for SaaS providers to launch their app instances into the enterprise's PaaS using that API. This would be the cloud equivalent of the SaaS-provider selling the enterprise an "appliance" they can keep within their data-center. The enterprise gets full control of the data: their PaaS can be set up to not allow the SaaS-provider any way to exfiltrate the data the app creates, to determine rollout schedule for new app versions, etc.
(And note that when I say "enterprise", I could just as well mean that any individual user could own their own completely-automated black-box micro-PaaS, living "across" various IaaS providers and migrating to new ones as necessary, brought into existence for them by the first SaaS vendor to try launching something into it. Effectively, the ultimate evolution of a personal VPS, providing you with a "management interface" that looks like a cross between Heroku's dashboard and the Windows "Programs and Features" pane.)
In other words, if I really wanted to have discussion secret enough to warrant e2e I probably wouldn't be using company/project chat for that no matter what sort of promises it gives.
That being said, of course e2e chat would be beneficial addition, and might help especially in larger enterprise deployments.
Why not, though? Assuming logging is disabled by both parties and the E2E is working as intended, you have something that's almost as secure as in-person conversation. The only weakness is if someone has malware actively on their machine recording the conversation as it's occurring... but then you also have many other issues.
Also, peerio.com, but they don't have a 'channels-like' interface, so maybe not what you're looking for.