Phoenix R&D

@phoenixrd.bsky.social

We Build Secure Communication Solutions

New release: Air v0.18.0 Air is a new private messenger based on the Messaging Layer Security (MLS) protocol. Invite-only for now. ✨️ New features: - You can now mute chats - Preparation work for multi-device

OpenMLS, our implementation of the Messaging Layer Security (MLS) protocol, has undergone a security audit conducted by @srlabs.bsky.social and sponsored by the @sovereign.tech. The security audit marks an important step toward making OpenMLS more secure. More details in our blog post:

OpenMLS independent security audit: results, history, and what comes next

OpenMLS, our implementation of the Messaging Layer Security (MLS) protocol, has undergone a security audit. The audit is an important milestone for OpenMLS. In this post, we share the results and take...

blog.phnx.im

🚨Der vorgelegte Gesetzentwurf zur "IP-Adressspeicherung" geht weit über vergangene Gesetzesentwürfe hinaus, die von deutschen und europäischen Gerichten als verfassungswidrig eingestuft wurden, und läuft völlig der eigentlichen Idee von Datenschutz und Datenminimierung zuwider.

Unsere Stellungnahme zur geplanten "IP-Adressspeicherung" – Gefährdung der digitalen Sicherheit und Souveränität Deutschlands

Sehr geehrte Frau Bundesministerin Hubig, angesichts des vom Bundesjustizministerium vorgelegten Gesetzentwurfs zur "IP-Adressspeicherung" und der damit effektiv verbundenen Einführung einer umfassend...

linkedin.com

We will be at #39C3 and we brought something exciting: Invitation codes for the beta phase of Air, our new secure messenger based on MLS! ✨ Hit us up if you’d like to join the beta with your friends. You can also follow @air.ms, where we’ll post updates over time.

Invitation cards in front of the ALL CREATURES WELCOME banner

AIR
• No phone number or email
• End-to-end encrypted
• No metadata retention
• Open-source
• Post-quantum secure
• Based on Messaging
Layer Security (MLS) and open standards
• EU-based

We made MLS more decentralized! We are excited to share DMLS that brings fork resilience to the MLS protocol, solving a key challenge in distributed systems while maintaining Forward Secrecy. This work was made possible by @equalitie.bsky.social, who funded it as part of the Breakout program.

Making MLS more decentralized

It’s no secret that we at Phoenix R&D are big fans of the Messaging Layer Security (MLS) protocol, having helped it to come into existence. It’s a versatile group key agreement and messaging protocol ...

blog.phnx.im

🚨 Der Gesetzentwurf zur #Chatkontrolle sieht vor, dass digitale Kommunikation einschließlich verschlüsselter Nachrichten und Fotos gescannt werden soll. Wir haben uns an die deutsche Bundesregierung gewandt, sich am 14. Oktober gegen den Gesetzesvorschlag der Chatkontrolle auszusprechen.

Unser Brandbrief zur geplanten Chatkontrolle – eine Gefährdung der digitalen Sicherheit Deutschlands | Phoenix R&D

🚨Der Gesetzentwurf zur #Chatkontrolle sieht vor, dass digitale Kommunikation einschließlich verschlüsselter Nachrichten und Fotos gescannt werden soll.  Die Sicherheit von sicheren Messenger-Diensten ...

linkedin.com

We did a thing. We combined TLS and MLS into a hybrid protocol. Why? Because sometimes you need connections that last for weeks, quantum-resistant security, or simpler certificates. The experiment is open-source. Here's the story 👇

Combining TLS and MLS: An experiment

We did a thing. We combined TLS and MLS into a hybrid protocol. Of course, when things get serious, full names are in order: We combined the Transport Layer Security protocol and the Messaging Layer S...

blog.phnx.im

We are #hiring a Freelance Junior Product Manager to help us build the next generation of private & secure messaging. If you’re interested in joining our team, please apply today! For friends of secure messaging 🥷, please share our post with potential candidates.

Phoenix R&D (Remote): Freelance Junior Product Manager (all genders, part-time)

Phoenix R&D GmbH has a remote job opening for Freelance Junior Product Manager (all genders, part-time) (published: 15.05.2025). Apply now or check the other available jobs.

join.com

We are happy @opentechfund.bsky.social is supporting our mission to bridge the gap in the secure messenger space by developing a new technological foundation for secure and private messaging that combines functional, privacy, and security features in a way that addresses a variety of threat models.

Open Technology Fund@opentechfund.bsky.social · 2y ago

Check out @opentechfund.bsky.social’s new Impacts & Outcomes page to learn about key results from our work!

Happy New Year! Phoenix R&D enters 2025 with some good news! Over the last few months we have doubled our team size, which will help us shorten our development cycles. We are excited about the new research projects. These projects also allow us to further diversify our sources of income. (🧵1/2)

Bild

We #hiring a full-time and a freelance Senior Rust Engineer to help us build the next generation of private & secure messaging. If you’re interested in joining our team, please apply today! For friends of secure messaging 🥷, please share our post with potential candidates.

Jobs at Phoenix R&D GmbH | JOIN

Jobs at Phoenix R&D GmbH. Browse all open positions and become part of our growing team! We are currently looking for additions to our company. Apply today!

join.com

We attended the Real World Crypto Symposium in Toronto 🇨🇦 where @raphaelrobert.bsky.social talked about how far MLS has come since RWC 2019. Highlights: - Post-quantum resistance and how easy it is to upgrade from current schemes - Deployment in existing products like Webex and Discord (🧵1/2)

Raphael Robert standing on RWC stage

WhatsApp shared first details on how they will comply with the #DMA. We are critical of the Signal protocol, as there has never been a complete specification that allows secure implementation of the protocol. This was one of the main reasons to develop MLS. Our conversation with @netzpolitik.org👇

Interoperabilität: WhatsApp soll bald mit anderen Messengern reden können – netzpolitik.org

Wegen neuer Regeln in der EU muss WhatsApp sich so öffnen, dass die Nutzer:innen auch mit Kontakten auf anderen Messengern kommunizieren können. Nun hat WhatsApp erste Details verraten, wie das gehen soll. Doch grundsätzliche Probleme bleiben.

netzpolitik.org

After @netzpolitik.org’s recent investigation into surveillance through push notifications, many people have been concerned about how their own privacy is affected when using messengers anonymously. In this blog post we examined the problem and what to do about it. Check it out 👇

On the privacy of push notifications

Push notifications are a mechanism through which applications can send and display notifications to users of smartphones. The infrastructure that drives these notifications in the background is a comp...

blog.phnx.im

Check out our blog post where we examine the push notification problem and address potential misconceptions! In the wake of recent reports on surveillance via push notifications, many people have been confused about it and how it affects their own privacy when using messengers anonymously.

On the privacy of push notifications

Push notifications are a mechanism through which applications can send and display notifications to users of smartphones. The infrastructure that drives these notifications in the background is a comp...

blog.phnx.im

Let's make this crystal clear: If you think you are anonymous because you - used a throwaway number for Signal - picked a completely random username for Wire/Matrix - were given a random username with Threema/Session YOU ARE NOT! You can be identified by the push tokens.

Post nicht verfügbar.

Numerous cryptography experts analyzed the Messaging Layer Security protocol. Théophile Wallez presented at the USENIX Security '23 conference the contributions of Jonathan Protzenko, Benjamin Beurdouche, Karthikeyan Bhargavan, and himself and why it is not a good idea to roll your own crypto.

USENIX Security '23 - TreeSync: Authenticated Group Management for Messaging Layer Security

USENIX Security '23 - TreeSync: Authenticated Group Management for Messaging Layer SecurityThéophile Wallez, Inria Paris; Jonathan Protzenko, Microsoft Resea...

youtu.be