Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-17 Thread Eugen Leitl
On Mon, Jul 15, 2013 at 02:17:38PM -0700, Tony Arcieri wrote: > They seem to have an... interesting philosophy about open source: > > "When you have an entire planet looking at the source code you can be > assured that the implementation is highly scrutinized and proven." > > Apparently all you h

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-16 Thread Petter Ericson
On 15 July, 2013 - Nathan of Guardian wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 07/15/2013 05:55 PM, Pavol Luptak wrote: > > Any idea how to have offline secure messaging (when Jabber+OTR is > > not possible to use)? > > Gibberbot already partially implements this, and we a

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Nathan of Guardian
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/15/2013 05:55 PM, Pavol Luptak wrote: > Any idea how to have offline secure messaging (when Jabber+OTR is > not possible to use)? Gibberbot already partially implements this, and we are working with ChatSecure and others to move forward with a s

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Pavol Luptak
But there is a strong disadvantage of Jabber+OTR compared to Threema (and probably Heml.is): Jabber+OTR needs a running client on both sides (two-way interactive communication) -> offline messages are not supported by Jabber+OTR ( offline messages are supported by XMPP, but not with OTR ). But J

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Karl Fogel
Moritz Bartl writes: >Surespot looks like an open source alternative: > >https://www.surespot.me/ >https://www.surespot.me/documents/how_surespot_works.html surespot's code may be excellent (I haven't looked at it), but their front page at https://surespot.me/ makes a promise it shouldn't make:

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Tony Arcieri
They seem to have an... interesting philosophy about open source: "When you have an entire planet looking at the source code you can be assured that the implementation is highly scrutinized and proven." Apparently all you have to do is put your source code online and it will magically be highly s

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Pavol Luptak
Thanks guys for info! Pavol On Mon, Jul 15, 2013 at 05:04:25PM -0400, Nathan of Guardian wrote: > On 07/15/2013 05:00 PM, Pavol Luptak wrote: > > Of course, I can use Jabber+OTR, but I think there is even no > > opensource alternative of Jabber+OTR client on iOS platform yet. > > ChatSecure! > c

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Nathan of Guardian
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/15/2013 05:00 PM, Pavol Luptak wrote: > Of course, I can use Jabber+OTR, but I think there is even no > opensource alternative of Jabber+OTR client on iOS platform yet. ChatSecure! chatsecure.org https://github.com/ChatSecure https://github.com/

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Parker Higgins
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 7/15/13 2:00 PM, Pavol Luptak wrote: > Of course, I can use Jabber+OTR, but I think there is even no > opensource alternative of Jabber+OTR client on iOS platform yet. There is ChatSecure: http://chrisballinger.info/apps/chatsecure/ Thanks, Parker

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Pavol Luptak
I like Surespot (and also TextSecure), but it runs on Android platform only. If I want to communicate with iPhone users in a secure way, I am forced to use Threema which is available on both platforms (iOS and Android). Is there any multiplatform opensource end-to-end secure alternative? (inste

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Nathan of Guardian
On 07/15/2013 06:41 AM, Moritz Bartl wrote: > Surespot looks like an open source alternative: > > https://www.surespot.me/ > https://www.surespot.me/documents/how_surespot_works.html Yes, I just discovered this myself. Looks interesting at first glance. Seems much more promising than other apps w

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Michael Carbone
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 GitHub here: https://github.com/surespot, includes client and server software. Would be interested in hearing folks' thoughts on it. Dev is @adam2fours, we ought to invite him to the conversation if he isn't on libtech. On 07/15/2013 06:41 AM, Moritz

[liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Moritz Bartl
Surespot looks like an open source alternative: https://www.surespot.me/ https://www.surespot.me/documents/how_surespot_works.html technical overview User creation- When a user is created in surespot two ECC (secp521) key pairs are generated, one for key derivation, and one for signing. The use