Hello Vishal,

The Electronic Frontier Foundation analysed many different communication
technologies and build a scorecard:
https://www.eff.org/secure-messaging-scorecard
At the moment, they reevaluate the different options for secure
communication. But the old one is available here:
https://www.eff.org/node/82654
I trust that organisation in that field. But you have to decide that
yourself.

As you can see, Signal got a very good rating as well as OTR for Pidgin,
that uses Jabber. I think it depends on your platform and needs.

-Everyone can run a jabber server an you could run the communication
through tor and hidden services. So you are independent from a company,
that runs the servers for you. There are many implementations of jabber
and OTR for many operating systems. And you don't need third party
services on your device. With jabber you are very independent but you
need a server address and a username of your contact for the
communication. 

-Signal uses a centralized server structure and the push message
functionality of Android or IOS. Therefor you need the Google Play
Services installed on your Android device. I don't know wich services of
IOS are used for push messages. You can use telephone numbers to send
messages and don't have to know a server address or a username.

I hope that my answer helps you to understand the different approach of
both techniques. If your question was aimed at the mathematical
background of the used encryption techniques, key-exchange-algorithms or
anything like that, it gets "a little bit" complicated.
But the most important thing is, that both use well known end-to-end
encryption, document their security design and are open to independent
code audits.

Kind regards,
 Ulrich



Am Samstag, den 13.08.2016, 14:23 +0000 schrieb vishal:
> I have been looking for the most secure form of messaging.  Many of you
> all already told me that Telegram doesn't have secure encryption.  It
> sounds like many of you are in favor of Jabber.  But what about Signal?
> I would be very interested in hearing some good points of view.  thank you,
> Vishal
> _______________________________________________
> tails-support mailing list
> [email protected]
> https://mailman.boum.org/listinfo/tails-support
> To unsubscribe from this list, send an empty email to 
> [email protected].

-- 

Diese Nachricht wurde mittels GNU Privacy Guard (GPG) signiert. Um die
Signatur dieser Nachricht auf Korrektheit zu überprüfen, benötigen Sie
meinen öffentlichen GPG Schlüssel.
Mit diesem können Sie auch    verschlüsselte    Nachrichten an mich
senden.
Mein Schlüssel mit der ID BB50A3F1 kann von folgendem Schlüsselserver
geladen werden:
hkp://keys.gnupg.net

Eine umfassende Anleitung zur Verwendung von GPG finden Sie hier:
https://gnupg.org/howtos/de/index.html

Warum Verschlüsselung und Signaturen für Mails sinnvoll sind?
Bruce Schneier, international bekannter Autor zum Thema IT-Sicherheit,
hat es in einem Essay gut zusammengefasst, welches hier in der Übersetzung zu 
finden ist:
https://netzpolitik.org/2015/bruce-schneier-warum-wir-verschluesseln/

Weitere Tipps der Electronic Frontier Foundation:
https://www.ifightsurveillance.org/


Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
tails-support mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-support
To unsubscribe from this list, send an empty email to 
[email protected].

Reply via email to