If you’re choosing where to move your chats, the short version is: Signal is the gold standard for mass-market E2E, and sovereign XMPP is the category where you own the server. WhatsApp is the one that shouldn’t win. Here’s the honest breakdown.
The three options at a glance
| Signal | Sovereign XMPP | ||
|---|---|---|---|
| Encryption | E2E (default) | E2E (default) | E2E (your choice) |
| Who runs the server | Meta | Signal Foundation | You / your community |
| Your identity | Phone number | Phone number | Your own domain |
| Ads / trackers | Yes, heavy | No | No |
| Controlled by you | No | No | Yes |
Encryption
All three can deliver genuine end-to-end encryption. WhatsApp and Signal use Signal Protocol; our stack uses OpenPGP (OX-IM). The difference isn’t the cipher — it’s trust in the transport and key handling.
- Signal is the reference implementation. Best-audited, default-on, nobody disputes it.
- WhatsApp offers the same protocol but runs on Meta-hosted infrastructure with metadata-heavy defaults.
- Sovereign XMPP puts the server, and thus the metadata, under your control. E2E must be deliberately configured.
Who controls your identity
This is the axis that actually separates them.
- With WhatsApp your identity is your phone number, owned by a carrier and a mega-corp.
- With Signal the same applies — your number is the account.
- With sovereign XMPP your address is
name@yourdomain, and it travels with you. That portability is the clearest practical win for XMPP.
Metadata: the thing most people overlook
End-to-end encryption protects content. It does not hide who talks to whom, when, from where — that’s metadata, and it’s often more meaningful than content.
- WhatsApp: the operator sees your graph of contacts, timing, and device metadata (subject to its privacy settings).
- Signal: designed to minimize server-held metadata; sees protocol-level information.
- Sovereign XMPP: the metadata exists on your server. If you trust yourself, that’s the strongest position there is.
The honest bottom line
- Pick Signal if you want maximum E2E with zero ops and a mainstream network.
- Pick sovereign XMPP if the operator-holds-power problem is what keeps you up at night, and you have a community to run it with.
- Avoid WhatsApp — it combines the least control with heavy metadata collection, and E2E there is table stakes, not a feature.
Infium is a live example of the third column. Try the demo or request an invite.