On 5/14/15, Daniel Martí <[email protected]> wrote: > On Thu, May 14, 2015 at 16:55:18 +0000, Jacob Appelbaum wrote: >> > Given that TextSecure is now no better than WhatsApp (both do push >> > messaging, both use phone numbers as identities, both use the axolotl >> > ratchet, etc.), I don't really see a need to promote TextSecure over >> > WhatsApp for casual (not-at-high-risk) encryption. SMSSecure, on the >> > other hand, does something that WhatsApp, WeChat, etc., can't. >> >> TextSecure and Signal are Free Software. > > TextSecure actually isn't.
TextSecure is Free Software with a non-free dependency for signaling. My understanding is that WebSockets is the future for TextSecure and Signal, which is perhaps partially deployed? I guess that the GCM and Apple push are both not working out very well for Signal/TextSecure/Redphone users. So good news on that front: they're ditching the non-free notification component soon, I think. > It uses Google Play Services, which is a > non-free java library. It is required for sending the messages via > Google and using their push service. Moreover, it won't work on devices > without google apps. That isn't entirely accurate - I have used it on a device without the play store but with GCM. That isn't commonly deployed but it functions entirely without a google account and without a bunch of google apps. It requires exactly one google service for GCM functionality. > > That is why SMSSecure is in F-Droid and TextSecure isn't, and I'm > guessing that is why people refer to the former as the free software > alternative. > TextSecure isn't in F-Droid for a bunch of very reasonable reasons that Moxie outlined. Regardless of what anyone calls it - both are freely licensed. F-Droid isn't quite feature complete with the Play store in some important areas, which is sad and lucky us: it is improving over time thanks to the hard work of F-Droid developers! However WhatsApp isn't Free Software as far as I understand, which was the original point of my message. So even if WhatsApp is otherwise identical in usability and security claims, we'd have no way to verify that it was true without source code, reverse engineering or well, blind faith. Just as a side note - SMS is just slightly better than GCM. There are nearly no good Free Software options that only uses open protocols over open and free networks. All the best, Jacob _______________________________________________ List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev To unsubscribe, email: [email protected]
