Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-17 Thread Eugen Leitl
On Mon, Jul 15, 2013 at 02:17:38PM -0700, Tony Arcieri wrote: They seem to have an... interesting philosophy about open source: When you have an entire planet looking at the source code you can be assured that the implementation is highly scrutinized and proven. Apparently all you have to

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-16 Thread Petter Ericson
On 15 July, 2013 - Nathan of Guardian wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/15/2013 05:55 PM, Pavol Luptak wrote: Any idea how to have offline secure messaging (when Jabber+OTR is not possible to use)? Gibberbot already partially implements this, and we are

[liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Moritz Bartl
Surespot looks like an open source alternative: https://www.surespot.me/ https://www.surespot.me/documents/how_surespot_works.html technical overview User creation- When a user is created in surespot two ECC (secp521) key pairs are generated, one for key derivation, and one for signing. The

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Michael Carbone
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 GitHub here: https://github.com/surespot, includes client and server software. Would be interested in hearing folks' thoughts on it. Dev is @adam2fours, we ought to invite him to the conversation if he isn't on libtech. On 07/15/2013 06:41 AM,

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Nathan of Guardian
On 07/15/2013 06:41 AM, Moritz Bartl wrote: Surespot looks like an open source alternative: https://www.surespot.me/ https://www.surespot.me/documents/how_surespot_works.html Yes, I just discovered this myself. Looks interesting at first glance. Seems much more promising than other apps who

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Pavol Luptak
I like Surespot (and also TextSecure), but it runs on Android platform only. If I want to communicate with iPhone users in a secure way, I am forced to use Threema which is available on both platforms (iOS and Android). Is there any multiplatform opensource end-to-end secure alternative?

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Nathan of Guardian
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/15/2013 05:00 PM, Pavol Luptak wrote: Of course, I can use Jabber+OTR, but I think there is even no opensource alternative of Jabber+OTR client on iOS platform yet. ChatSecure! chatsecure.org https://github.com/ChatSecure

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Pavol Luptak
Thanks guys for info! Pavol On Mon, Jul 15, 2013 at 05:04:25PM -0400, Nathan of Guardian wrote: On 07/15/2013 05:00 PM, Pavol Luptak wrote: Of course, I can use Jabber+OTR, but I think there is even no opensource alternative of Jabber+OTR client on iOS platform yet. ChatSecure!

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Karl Fogel
Moritz Bartl mor...@torservers.net writes: Surespot looks like an open source alternative: https://www.surespot.me/ https://www.surespot.me/documents/how_surespot_works.html surespot's code may be excellent (I haven't looked at it), but their front page at https://surespot.me/ makes a promise it

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Pavol Luptak
But there is a strong disadvantage of Jabber+OTR compared to Threema (and probably Heml.is): Jabber+OTR needs a running client on both sides (two-way interactive communication) - offline messages are not supported by Jabber+OTR ( offline messages are supported by XMPP, but not with OTR ). But

Re: [liberationtech] Surespot? Re: Feedback on Threema - Seriously secure mobile messaging.

2013-07-15 Thread Nathan of Guardian
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/15/2013 05:55 PM, Pavol Luptak wrote: Any idea how to have offline secure messaging (when Jabber+OTR is not possible to use)? Gibberbot already partially implements this, and we are working with ChatSecure and others to move forward with a