Re: [Standards] Encrypted Jingle File Transfer

2017-06-04 Thread Fabian Beutel
Hey, I very much like the idea of having the option to encrypt complete stanzas! I think this could be implemented transparently and would allow all kind of jingle session meta data to be secret. I wrote about this on this list on two occasions already: https://mail.jabber.org/pipermail/standards

Re: [Standards] Encrypted Jingle File Transfer

2017-06-04 Thread Remko Tronçon
On 4 June 2017 at 15:45, Vanitas Vitae wrote: > Thank you for your suggestion. I didn't knew about xmlenc, but it looks > like it is (for now) only available for java, so restricting algorithms > etc. definitely sounds like a good idea. > FYI, there's also XMLSec, the LibXML2-based C library, whi

Re: [Standards] Encrypted Jingle File Transfer

2017-06-04 Thread Vanitas Vitae
Hi Remko! Thank you for your suggestion. I didn't knew about xmlenc, but it looks like it is (for now) only available for java, so restricting algorithms etc. definitely sounds like a good idea. Am 04.06.2017 um 15:31 schrieb Remko Tronçon: > Hi Vanitasvitae! > > I wonder if it would make sense

Re: [Standards] Encrypted Jingle File Transfer

2017-06-04 Thread Remko Tronçon
Hi Vanitasvitae! I wonder if it would make sense to use something like xmlenc to have a 'generic' way to encrypt (parts of) stanzas. This way, you can decouple the encryption key info etc. from the things you want to encrypt, and you can choose to encrypt entire elements, or just parts of elements

[Standards] Encrypted Jingle File Transfer

2017-06-04 Thread Vanitas Vitae
Hi! As part of my GSoC project I'd like to think of a way to enable end-to-end encrypted Jingle file transfer. It should be possible for participants to exchange files encrypted by exchanging a key using the encryption scheme of their choice (OMEMO, OpenPGP, OTR...). Some nice-to-have properties