Re: Threema. / don't trust closed source software

2013-11-10 Thread Mark Schneider

Am 10.11.2013 02:46, schrieb Robert J. Hansen:

Looking over their site briefly I was unable to find a link for source code. As 
a result, I think very little of it. I don't think it's wise to trust unknown 
third-party binaries that don't provide source.
It is commercial iOS and Androif application without source code and 
evenn such important details like the used encryption.


Don't trust closed source software products!

regards, Mark

--
m...@it-infrastrukturen.org

http://rsync.it-infrastrukturen.org
http://git.it-infrastrukturen.org


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Threema. / don't trust closed source software

2013-11-10 Thread Filip M. Nowak
Hello,

On 10.11.2013 12:02, Mark Schneider wrote:
 (...)
 It is commercial iOS and Androif application without source code and
 evenn such important details like the used encryption.
 (...)

Actually such information are available here:
https://threema.ch/en/faq.html.

They are stating that they are using NaCl (http://nacl.cr.yp.to/) for
ECC and NSFileProtectionComplete (iOS) or/and self-implemented AES256
(Android) for stored messages encryption.

Cheers,
Filip

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users