UnifiedPush for Android push notifications

[Victor239]

Push notifications on Android are by default distributed by Google's Firebase Cloud Messaging (FCM). The use of this can reveal sensitive data, and even in apps which minimise privacy leaks in push notifications (such Signal's implementation where they only use push notifications for a wakeup event) it still remains a metadata leak.

An alternative to this is UnifiedPush, a standard which allows for multiple methods of push notification delivery. Implementations of this include several client Android apps, as well as optional server software for those who prefer to self-host.

ntfy is the most relevant implementation here. It's an Android app that allows for push notifications powered by WebSockets or HTTP JSON stream (like HTTP Server Sent Events). Support for UnifiedPush does need to be implemented in the app itself though, so current app support is limited.

Nonetheless if a user is using a supported app it is better for privacy if they install ntfy to route their push notifications. And it would be beneficial in general to increase community awareness of these projects, to encourage more apps to integrate the UnifiedPush connector.

[ph00lt0]

Website doesn't even work. Generally I don't think this solves anything.

[d4rklynk]

Just use Sandboxed Google Play Services, it is the best solution so far.

[d4rklynk]

The best solutions to have push notifications:

• Buy Pixel 6a and install GrapheneOS with Sandboxed Google Play in a separate profile
• Stick with stock OS

[dngray]

This could be a possibility as a part of privacyguides/privacyguides.org#1686

The only benefit of using something like UnifiedPush is if you self host, and there does appear to be some apps which support it https://unifiedpush.org/users/apps/