Sign in

Raphael Robert

@raphaelrobert.bsky.social
310 followers 102 following 63 posts

Founder and director of @phoenixrd.bsky.social. Working on @air.ms. #MessagingLayerSecurity co-author. 🦀. He/him.

PostsRepliesMedia
Raphael Robert @raphaelrobert.bsky.social · 26/06/2026
The Mullvad founder gave millions to extremist far right party: www.flamman.se/techprofil-g...
flamman.se
Techprofil ger miljoner till Örebropartiet
It-bolaget Mullvads grundare donerade fem miljoner – till parti som vill se ”storskalig återvandring”
021
Reposted by Raphael Robert
Julian Mair @julianmair.com · 23/06/2026
For the spontaneous ones: Tomorrow evening we're hosting an @air.ms community meetup. If you're in town, feel free to swing by!
011
Raphael Robert @raphaelrobert.bsky.social · 17/06/2026
Come and say hi if you are in Berlin next Wednesday!
030
Raphael Robert @raphaelrobert.bsky.social · 13/06/2026
Mistral is starting to look interesting
100
Raphael Robert @raphaelrobert.bsky.social · 11/06/2026
If only there was a way to encrypt chats
0186
Raphael Robert @raphaelrobert.bsky.social · 28/05/2026
A new secure messenger needs to have a solid foundation. For Air, this foundation is OpenMLS. It has been years in the making, and now it has been audited. This is an important milestone for Air.
0142
Raphael Robert @raphaelrobert.bsky.social · 27/05/2026
The OpenMLS audit report is now public!
041
Raphael Robert @raphaelrobert.bsky.social · 22/05/2026
Time to send some animated GIFs!
031
Reposted by Raphael Robert
Air @air.ms · 18/05/2026
We will be at @re-publica.com over the next 3 days and brought some invitation codes for Air! ✨ Reach out to @julianmair.com if you’d like to get early access to Air. #rp26
Air invitation cards in front of the re:publica26 banner.

AIR
- No phone number or email
- End-to-end encrypted
- No metadata retention
- Self-hosting capable
- Post-quantum secure
- Based on Messaging Layer Security (MLS) and open standards
- EU-based
- Free and open-source
0164
Raphael Robert @raphaelrobert.bsky.social · 27/03/2026
You can now reply to messages in Air
040
Reposted by Raphael Robert
Soatok @soatok.bsky.social · 17/02/2026
soatok.blog/2026/02/17/c... #Matrix #security #cryptography
soatok.blog
Cryptographic Issues in Matrix’s Rust Library Vodozemac - Dhole Moments
Two years ago, I glanced at Matrix’s Olm library and immediately found several side-channel vulnerabilities. After dragging their feet for 90 days, they ended up not bothering to fix any of i…
56135
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 30/01/2026
We will be at #FOSDEM and will bring something exciting: Invitation codes for the beta phase of @air.ms, our new secure messenger based on MLS! ✨ Hit @julianmair.com up if you’d like to join the beta with your friends.
Invitation cards in front of a notebook with a MLS sticker.

AIR
• No phone number or email
• End-to-end encrypted
• No metadata retention
• Open-source
• Post-quantum secure
• Based on Messaging Layer Security (MLS) and open standards
• EU-based
0202
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 26/12/2025
We will be at #39C3 and we brought something exciting: Invitation codes for the beta phase of Air, our new secure messenger based on MLS! ✨ Hit us up if you’d like to join the beta with your friends. You can also follow @air.ms, where we’ll post updates over time.
Invitation cards in front of the ALL CREATURES WELCOME banner

AIR
• No phone number or email
• End-to-end encrypted
• No metadata retention
• Open-source
• Post-quantum secure
• Based on Messaging
Layer Security (MLS) and open standards
• EU-based
62911
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 29/10/2025
We made MLS more decentralized! We are excited to share DMLS that brings fork resilience to the MLS protocol, solving a key challenge in distributed systems while maintaining Forward Secrecy. This work was made possible by @equalitie.bsky.social, who funded it as part of the Breakout program.
blog.phnx.im
Making MLS more decentralized
It’s no secret that we at Phoenix R&D are big fans of the Messaging Layer Security (MLS) protocol, having helped it to come into existence. It’s a versatile group key agreement and messaging protocol ...
23112
Reposted by Raphael Robert
netzpolitik.org @netzpolitik.org · 07/10/2025
Die Stimmen gegen die #Chatkontrolle werden mehr und lauter. Nun hagelt es deutliche Kritik aus der Wirtschaft. Zudem warnen der Deutsche Journalistenverband und der Anwaltverein vor einer Überwachungsinfrastruktur, die schnell ausgebaut werden könnte. netzpolitik.org/2025/eu-uebe...
netzpolitik.org
EU-Überwachungspläne in der Kritik: Wirtschaftsverbände Bitkom und eco klar gegen Chatkontrolle
Die Stimmen gegen die Chatkontrolle werden mehr und lauter. Nun hagelt es deutliche Kritik aus der Wirtschaft. Zudem warnen der Deutsche Journalistenverband und der Anwaltverein vor einer Überwachungs...
5297153
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 06/10/2025
🚨 Der Gesetzentwurf zur #Chatkontrolle sieht vor, dass digitale Kommunikation einschließlich verschlüsselter Nachrichten und Fotos gescannt werden soll. Wir haben uns an die deutsche Bundesregierung gewandt, sich am 14. Oktober gegen den Gesetzesvorschlag der Chatkontrolle auszusprechen.
linkedin.com
Unser Brandbrief zur geplanten Chatkontrolle – eine Gefährdung der digitalen Sicherheit Deutschlands | Phoenix R&D
🚨Der Gesetzentwurf zur #Chatkontrolle sieht vor, dass digitale Kommunikation einschließlich verschlüsselter Nachrichten und Fotos gescannt werden soll.  Die Sicherheit von sicheren Messenger-Diensten ...
032
Raphael Robert @raphaelrobert.bsky.social · 18/09/2025
LinkedIn annonced that it will use your data to train AI models, and craftily chose to use an opt-out mechanism. Deactivate this in your settings now, of you don’t want to give away your content.
010
Raphael Robert @raphaelrobert.bsky.social · 08/09/2025
As an ex head of security of an end-to-end encrypting messenger I can relate www.theguardian.com/technology/2...
theguardian.com
Ex-WhatsApp cybersecurity head says Meta endangered billions of users in new suit
Attaullah Baig, fired this year, said he had warned Mark Zuckerberg engineers had unaudited access to user data
040
Reposted by Raphael Robert
Richard Barnes @ipv.sx · 28/08/2025
There's an article making the rounds with the provocative title "MLS: The Naked King of End-to-End Encryption". It needs some rebuttal. www.poberezkin.com/posts/2025-0... tl;dr - MLS is fine. This is a misunderstanding about modularity.
poberezkin.com
MLS: The Naked King of End-to-End Encryption
Evgeny Poberezkin's blog
1144
Raphael Robert @raphaelrobert.bsky.social · 25/08/2025
Not long ago, someone (who is likely the founder of SimpleX Chat) wrote a blog post about MLS that contained a pretty blatant factual mistake about MLS' authentication, including an alleged lack of security. Thankfully, @soatok.bsky.social took the time to debunk that: soatok.blog/2025/08/25/b...
soatok.blog
Barking Up The Ratchet Tree – MLS Is Neither Royal Nor Nude - Dhole Moments
One of the first rules you learn about technical writing is, “Know your audience.” But often, this sort of advice is given without sufficient weight or practical examples. Instead, you&…
0102
Raphael Robert @raphaelrobert.bsky.social · 08/08/2025
I had to see for myself
110
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 02/07/2025
We did a thing. We combined TLS and MLS into a hybrid protocol. Why? Because sometimes you need connections that last for weeks, quantum-resistant security, or simpler certificates. The experiment is open-source. Here's the story 👇
blog.phnx.im
Combining TLS and MLS: An experiment
We did a thing. We combined TLS and MLS into a hybrid protocol. Of course, when things get serious, full names are in order: We combined the Transport Layer Security protocol and the Messaging Layer S...
054
Raphael Robert @raphaelrobert.bsky.social · 02/07/2025
We really did do a thing.
020
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 15/05/2025
We are #hiring a Freelance Junior Product Manager to help us build the next generation of private & secure messaging. If you’re interested in joining our team, please apply today! For friends of secure messaging 🥷, please share our post with potential candidates.
join.com
Phoenix R&D (Remote): Freelance Junior Product Manager (all genders, part-time)
Phoenix R&D GmbH has a remote job opening for Freelance Junior Product Manager (all genders, part-time) (published: 15.05.2025). Apply now or check the other available jobs.
055
Raphael Robert @raphaelrobert.bsky.social · 14/05/2025
Happy to announce that I’ll be speaking at @passthesaltcon.bsky.social on July 2nd! I’ll discuss end-to-end encryption with MLS, the growing MLS ecosystem, the MIMI IETF working group, and metadata protection. It’s my first time attending, and I look forward to connecting with the French community!
022
Reposted by Raphael Robert
Matthew Green @matthewdgreen.bsky.social · 03/05/2025
The idea that you can just “teach computer science” and be apolitical is a beautiful dream that expired in the 2000s, at the latest. Computer science has re-organized every facet of our society: it is inherently political. Instead of taking this idea seriously, we ran from it. Now we live in hell.
523659
Raphael Robert @raphaelrobert.bsky.social · 30/04/2025
Hey Google designers, are we sure about this new layout logo in Google Meet? The negative space around the boxes reminds me of something.
000
Raphael Robert @raphaelrobert.bsky.social · 22/04/2025
The MLS Architecture document – the companion document to the MLS Protocol document – is now finally available as RFC 9750: www.rfc-editor.org/info/rfc9750
rfc-editor.org
Information on RFC 9750 » RFC Editor
072
Raphael Robert @raphaelrobert.bsky.social · 17/04/2025
And so it begins, BlueSky complies with censorship requests of an authoritarian regime
021
Raphael Robert @raphaelrobert.bsky.social · 01/04/2025
www.privacyguides.org/articles/202...
privacyguides.org
The Dangers of End-to-End Encryption
Privacy Guides is formally taking a stand against dangerous and frightening technologies.
120
Raphael Robert @raphaelrobert.bsky.social · 27/02/2025
MLS is efficient, but what does that mean in practice? This paper sheds some light on the question by building a test framework for OpenMLS. arxiv.org/pdf/2502.18303
arxiv.org
154
Raphael Robert @raphaelrobert.bsky.social · 25/02/2025
… and now it looks like Apple caved, while Google didn’t: www.forbes.com/sites/zakdof...
forbes.com
Google Says Its Encryption Has Not Changed—Does Android Now Beat iPhone?
Google tells Joe Rogan and Elon Musk that Android's security suddenly beats iPhone.
000
Raphael Robert @raphaelrobert.bsky.social · 25/02/2025
The SCW podcast team does it again and breaks down a newish, complex and alarming topic into palatable and informative pieces. Excellent questions from @durumcrustulum.com and @dadrian.io expertly answered by @josephhall.org and @matthewdgreen.bsky.social. Listen to it if you have time!
0116
Raphael Robert @raphaelrobert.bsky.social · 21/02/2025
I’m deeply disappointed in Apple. www.bbc.com/news/article...
bbc.com
Apple pulls data protection tool after UK government security row
Customers' photos and documents stored online will no longer be protected by end to end encryption.
111
Raphael Robert @raphaelrobert.bsky.social · 14/02/2025
We proudly signed this too. Always push back.
051
Raphael Robert @raphaelrobert.bsky.social · 14/02/2025
I love that @kagi.com now uses Privacy Pass. It would have been nice to get some credit since your "own implementation" looks like a wrapper around my implementation. blog.kagi.com/kagi-privacy...
blog.kagi.com
Introducing Privacy Pass authentication for Kagi Search | Kagi Blog
Today we are announcing a new privacy feature coming to Kagi Search.
291
Raphael Robert @raphaelrobert.bsky.social · 18/11/2024
Another example of how legal interception of private communication cannot be limited to the “good guys”: www.cisa.gov/news-events/...
cisa.gov
Joint Statement from FBI and CISA on the People's Republic of China (PRC) Targeting of Commercial Telecommunications Infrastructure | CISA
032
Raphael Robert @raphaelrobert.bsky.social · 17/11/2024
Hey new followers! I hope this will become what Twitter once was – it's already starting to feel that way. Looking forward to better conversations! PS: Mastodon is still as valid as it was before.
020
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 26/09/2024
This weekend, @raphaelrobert.bsky.social and @julianmair.com are joining the #GlobalGathering. We will be hosting a booth and circle on Saturday to discuss the current state of privacy preserving and decentralized messengers. We look forward to seeing you at there! Feel free to ping us!
032
Raphael Robert @raphaelrobert.bsky.social · 18/09/2024
🔐 Discord introduces end-to-end encryption with Messaging Layer Security (MLS) 🔐 Im really happy to see another large scale MLS deployment. It shows the technology is fit for purpose, demonstrably so. discord.com/blog/meet-da...
discord.com
Meet DAVE: Discord’s New End-to-End Encryption for Audio & Video
We’re rolling out end-to-end encryption for voice and video calls! We’d like to share why we’re bringing E2EE A/V to Discord, share our design and implementation goals, and provide a high-level techni...
0103
Raphael Robert @raphaelrobert.bsky.social · 04/09/2024
We are hiring two Rust engineers!
011
Raphael Robert @raphaelrobert.bsky.social · 01/06/2024
I like the idea that “covfefe” was a premonitory acronym for “convicted felon”
031
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 28/03/2024
We attended the Real World Crypto Symposium in Toronto 🇨🇦 where @raphaelrobert.bsky.social talked about how far MLS has come since RWC 2019. Highlights: - Post-quantum resistance and how easy it is to upgrade from current schemes - Deployment in existing products like Webex and Discord (🧵1/2)
Raphael Robert standing on RWC stage
142
Raphael Robert @raphaelrobert.bsky.social · 20/02/2024
Signal usernames are out, grab yours now!
000
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 09/02/2024
WhatsApp shared first details on how they will comply with the #DMA. We are critical of the Signal protocol, as there has never been a complete specification that allows secure implementation of the protocol. This was one of the main reasons to develop MLS. Our conversation with @netzpolitik.org👇
netzpolitik.org
Interoperabilität: WhatsApp soll bald mit anderen Messengern reden können – netzpolitik.org
Wegen neuer Regeln in der EU muss WhatsApp sich so öffnen, dass die Nutzer:innen auch mit Kontakten auf anderen Messengern kommunizieren können. Nun hat WhatsApp erste Details verraten, wie das gehen soll. Doch grundsätzliche Probleme bleiben.
043
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 03/01/2024
We ended 2023 with a talk at #37C3. @raphaelrobert.bsky.social and Konrad presented Messaging Layer Security (MLS). The room was packed and some people couldn't attend – luckily the talk is now online. 🍿 media.ccc.de/v/37c3-12064... #securemessaging #encryption #e2ee #messaginglayersecurity
Raphael presenting MLS at 37C3
073
Raphael Robert @raphaelrobert.bsky.social · 29/12/2023
Today at #37c3, 3:45pm, Konrad and I will give a talk in hall Zuse about Messaging Layer Security (MLS). They call it RFC 9420, we say MLS: A new IETF standard for end-to-end encryption, bringing improvements in performance and security. 👉 fahrplan.events.ccc.de/congress/202...
fahrplan.events.ccc.de
Lecture: RFC 9420 or how to scale end-to-end encryption with Messaging Layer Security | Friday | Sch...
054
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 26/12/2023
We are very excited to be at #37c3 in Hamburg after a long pandemic break. On day 3 (29.12., 3:45pm), @raphaelrobert.bsky.social and Konrad will give a talk on “RFC 9420 – or how to scale end-to-end encryption with Messaging Layer Security (MLS)” 👉 fahrplan.events.ccc.de/congress/202...
Picture from the train with a computer on the table with an open presentation: "RFC 9420 - or how to scale end-to-end encryption with Messaging Layer Security (MLS)".
142
Reposted by Raphael Robert
Phoenix R&D @phoenixrd.bsky.social · 20/12/2023
Check out our blog post where we examine the push notification problem and address potential misconceptions! In the wake of recent reports on surveillance via push notifications, many people have been confused about it and how it affects their own privacy when using messengers anonymously.
blog.phnx.im
On the privacy of push notifications
Push notifications are a mechanism through which applications can send and display notifications to users of smartphones. The infrastructure that drives these notifications in the background is a comp...
022
Raphael Robert @raphaelrobert.bsky.social · 20/12/2023
Let’s get down to why exactly push notifications have a privacy issue 👇 blog.phnx.im/privacy-of-push-notifications/
blog.phnx.im
On the privacy of push notifications
Push notifications are a mechanism through which applications can send and display notifications to users of smartphones. The infrastructure that drives these notifications in the background is a comp...
044