Hacker News Reader

User IDs are sensitive because they can be used by internet service providers to track and identify users as they move through various networks. And they can be associated to figure out who your contacts are. As others have mentioned, the CCP could use this information to punish users for joining rooms they don’t like.

The rule is, if ever in doubt, send all data through https. There is just about no reason to use unencrypted http or tcp in 2021.

Why is your app sending anything over the network unencrypted? You're making HTTP requests (not HTTPS)??

I think it's UDP. Probably for the audio

That may be true of Clubhouse but not necessarily for the person I responded to. Anyway, there's plenty of ways to encrypt UDP, such as DTLS; see this RFC: https://tools.ietf.org/html/rfc6347

and why not ? Why do you insist everything should be encrypted ?

You can tell who is talking with whom.

Snowden exposed mass 'metadata' collection, most didn't seem to care, sadly.

Everything can be sensitive if you don’t get informed consent.