Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make Threema Web a real desktop client #515

Closed
piegamesde opened this issue Jun 12, 2018 · 27 comments
Closed

Make Threema Web a real desktop client #515

piegamesde opened this issue Jun 12, 2018 · 27 comments

Comments

@piegamesde
Copy link

Threema Web is not a real desktop client, it is no more than a web frontend for the app. As someone who almost exclusively uses the laptop for all communication, this is a real pain. All chat applications nowadays have web clients that are completely independent of the phone (except WhatsApp of course), and Threema should have it too.

Expected Behavior

I can use Threema on my Desktop / in my browser independently of my phone. I don't have the phone to be online. I am not required to enter a password or scan a QR code on every connection attempt.

Current Behavior

Threema web is no more than a web frontend for the app. Every thing I do goes through the phone. This is a huge battery drain. Also, every time the connection is lost I need to reconnect it. Sometimes, I don't notice the connection is lost and miss potentially important messages.

Possible Solution

Threema accounts are not tied to a phone number, but to the Threema ID. So there is no real reason why I should be forced to use mobile devices for using it. I don't care if Threema web has to be my only client, or if there is no sync between them.

Your Environment

  • Threema Web version: 1.8.2
  • Threema App version: 3.42.2000418
  • Browser name and version: Chromium: 59.0.3071.115
  • Computer operating system and version: Arch Linux
  • Smartphone operating system and version: Android 4.4.2
@dbrgn
Copy link
Contributor

dbrgn commented Jun 12, 2018

Hi, thanks for your feedback.

The fact that Threema Web connects to your phone is by design. It makes sure that the private key never leaves your phone. It's an extension of your phone, not a standalone client.

From what I understand, what you want is not necessarily multi-client functionality, but a standalone Threema client on your computer so that you don't need your phone at all, right? In that case, maybe https://www.openmittsu.de/ could work for you?

@ovalseven8
Copy link
Contributor

I think this is an interesting topic and I basically agree with Threema's decision here.

Most people do instant messaging with the smartphone, now when it comes to using the same ID from multiple devices, it's the best sulution when everything goes through the phone from a security point of view. No duplicated message history, no shared or additional private keys etc. That's a huge advantage when it comes to security because this model is easy to understand and the user can be sure that all the stuff is stored on the phone only.

So, I think it's okay to have a web client for the app on the smartphone. My point here is that the web application should be way more stable, efficient and use less battery. That's not the case at the moment and should be fixed as soon as possible. Even if that means a rewrite with other frameworks or technologies. If the web client is working fine then, it's really a good solution for a private messenger.

However, when you want to use Threema at the desktop only (it's not about multi-device support), I am with @piegamesde and I'd like to have an officially supported Threema client. One of Threema's strengths is that the account is not dependent on mobile phone numbers. However, Threema does not make advantage of that fact at the moment. Let's see if that changes.

@dbrgn
Copy link
Contributor

dbrgn commented Jun 12, 2018

Closing for now. Feel free to leave further comments.

@dbrgn dbrgn closed this as completed Jun 12, 2018
@jeengbe
Copy link

jeengbe commented Jul 26, 2020

You can emulate a standalone app with Google Chrome.
You can pass a site to launch in borderless mode (Tabs are disabled)
~Google\Chrome\Application\chrome_proxy.exe --profile-directory=Default --app=https://web.threema.ch/

You can also change the icon from the default Chrome Icon to Threema's, which you can find by having a look at the source code
SIcon: %USERPROFILE%\Pictures\Threema.ico

You can then use Threema Web like any other application
image

@lgrahl
Copy link
Contributor

lgrahl commented Jul 27, 2020

That shouldn't be necessary. Threema Web is a PWA now, see #407.

@piegamesde
Copy link
Author

This issue is not about a "native" desktop client, it is about a standalone desktop client independent from the phone. Today, I'd maybe call this "multi device support". Nonetheless, the issue description is pretty clear about what I want(ed), so please don't derail it with related issues.

I personally don't care about this any more, since I've long moved on to other chat applications (Matrix at the moment, FWIW). But others may still do.

@lgrahl
Copy link
Contributor

lgrahl commented Jul 28, 2020

My response was towards @jeengbe.

@BlkPingu
Copy link

I second this. I only use Threema sparingly because it's not multi-device supported. Please push this

@lgrahl
Copy link
Contributor

lgrahl commented Oct 26, 2020

We've publicly announced that we're working on multi-device and a desktop client. No need to push. 🙂

@ilu33
Copy link

ilu33 commented Feb 1, 2021

I don't care about Threema on phones, so I don't need multi-device-support. Was there any progress with a desktop-only client? Is there an ETA?
Thanks for the OpenMittsu mention, I'll have a look. The last commit was almost a year ago though, is it still recommended?

@langhard
Copy link

Interim solution until an official desktop app is released: Threema's progressive web app can be packaged with Electron with little effort. A tutorial or the ready to download app is available on my (german) blog: https://langhard.ch/download-threema-desktop-client-app/

@lgrahl
Copy link
Contributor

lgrahl commented Feb 12, 2021

One has to be aware that it comes with all the pros and cons of an Electron app. For Threema Web (but not for Threema Desktop), we believe the cons (e.g. potential privilege escalation, potential security vulnerabilities of Electron without an auto-update function) outweigh the pros at the moment.

@BlkPingu
Copy link

We've publicly announced that we're working on multi-device and a desktop client. No need to push. 🙂

Sounds good, as long as this means I don't need a browser on desktop to use Threema when this is released. I'm fine with using a phone to authorise a desktop client to tap into my account, but I want to be able use Threema without opening a browser at all.

@jeengbe
Copy link

jeengbe commented Mar 17, 2021

I want to be able use Threema without opening a browser at all.

That's what PWAs are for :)

@hondogitsune
Copy link

We've publicly announced that we're working on multi-device and a desktop client. No need to push. 🙂

https://threema.ch/en/blog/posts/md-architectural-overview-intro
https://threema.ch/en/blog/posts/md-architectural-overview#main

It's been 6 months since the last update on the blog. I have full trust in your competence and will to make it happen.
However, can we have a tiny update or life-sign?

@lgrahl
Copy link
Contributor

lgrahl commented May 3, 2021

Be assured that we're working on it (quite hard).

@hondogitsune
Copy link

hondogitsune commented May 4, 2021

Thank you lots, will buy several more copies of Threema for my friends on the same day it happens.
Especially for those on Linux who love privacy && being free as in freedom 😄

@bluec0re
Copy link
Contributor

One has to be aware that it comes with all the pros and cons of an Electron app. For Threema Web (but not for Threema Desktop), we believe the cons (e.g. potential privilege escalation, potential security vulnerabilities of Electron without an auto-update function) outweigh the pros at the moment.

As there is now an electron based desktop client, what changed these believes? Or to be more clear, what does the desktop client provide which the PWA doesn't already?

@threema-danilo
Copy link
Contributor

threema-danilo commented Oct 27, 2021

@bluec0re some people really want to download a standalone application that has its own icon in the dock and in the OS application menu. If you're happy with a PWA, feel free to keep using it.

Regarding security, we made sure that Threema Web runs entirely in a sandboxed process and does not have access to the Electron internals. This should solve the concerns regarding privilege escalation. As long as the application is regularly updated (that's why it has an auto-updater built in) it should provide the same level of security as a web browser.

Additionally, in a standalone application users cannot install browser extensions, which pose an additional potential for vulnerabilities. So in some sense, while packaging an Electron app poses its challenges, it also provides some security benefits.

Version 1.0 of the desktop app is meant as a transitional desktop application while we work on version 2.0, which will be a fully standalone desktop client.

@bluec0re
Copy link
Contributor

Thanks for the explanations. Great to hear that you put quite some thoughts into reducing the additional risks, especially reducing the patch gap and inherit sandbox problems. I understand the benefits you can draw from it by having a better control over the handled input (but as usual, with great power comes great responsibility ;-) ). Hopefully https://web.threema.ch will not be discontinued at some point in the future though.

@hondogitsune
Copy link

@bluec0re
Thanks to you and threema-danilo for the quick update. I am extremely happy to see it being released! Buying a friend his license now. Whenever they can compile it for Gentoo anyways.

Edit:
I am a bit disappointed it doesn't work like Signal-Desktop at all. My device must remain on?

as @piegamesde wrote

All chat applications nowadays have web clients that are completely independent of the phone (except WhatsApp of course), and Threema should have it too.

So, we have just an additional browser to install? Not what i expected to be honest.

@BlkPingu
Copy link

BlkPingu commented Oct 28, 2021

@vulpes9 on their blog they talk about this being temporary.

Outlook: Threema 2.0 for Desktop
The next major update of the desktop app will not only introduce a completely redesigned user interface, it will also be based on a totally new architecture. Thanks to multi-device functionality, version 2.0 no longer requires an active connection to your mobile device. This is to say that you’ll be able to use the desktop app even if your smartphone happens to be turned off.

The development of the multi-device technology is in full swing, but it turns out to be more time-consuming than anticipated. Several technical challenges have already been met, but there is still work ahead. More often than not, the path to security is neither easy nor fast. And when it comes to security and privacy protection, we are under no circumstances willing to cut corners. Unfortunately, the multi-device solution’s release therefore gets delayed. Thank you for your patience and understanding!

We’ll keep you posted and provide another update about the development of Threema 2.0 for desktop at the end of the year. Stay tuned!

@hondogitsune
Copy link

@BlkPingu
My bad! I wasn't paying full attention to the blog post and missed this part, as it was already midnight in my timezone. I'll just be more patient until v2.0.

@dbrgn
Copy link
Contributor

dbrgn commented Oct 28, 2021

Whenever they can compile it for Gentoo anyways.

This Arch Linux PKGBUILD may help as a reference: https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=threema-desktop

@hondogitsune
Copy link

hondogitsune commented Oct 15, 2022

Update 30.12.2021: The development of Threema 2.0 for desktop is coming along great, but there’s still a lot to do. We’re currently busy combining frontend and backend. A sneak peek of the new UI can be found on Twitter.
https://twitter.com/ThreemaApp/status/1476490273119252480

So, is this forgotten? Do I have to wait until 2023?

@Wh1teT1ger55
Copy link

Come on Threema. Publish it

@threema-lenny
Copy link
Contributor

threema-lenny commented May 2, 2023

The development of Desktop 2.0 is ongoing and a preview is available for use in combination with Threema for iOS: https://threema.ch/en/download-md
If you're curious regarding the development, please see the changelog at the bottom of that page for details.

Please refrain from continuously pinging here. When there's something to announce (e.g. a release, support for Android, etc.), it will be done on the usual channels (e.g. subscription to the *THREEMA channel).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests