Nadim Kobeissi: > Hello everyone, > > Skype was recently rewritten entirely. It is now based on Electron. This new > Skype has been rolled on all desktop platforms worldwide. > > When Cryptocat and Signal switched to Electron, the security of Electron > itself became somewhat more important (more-so when Signal switched, since, > as everyone knows, Cryptocat is used exclusively by myself, my poodle and > exactly one random person on Twitter.) > > But now that Skype has switched too, Electron is a much bigger deal: busting > Electron = busting Skype, and getting a bunch of comparatively less important > apps (including Signal, Cryptocat) for free. > > Guides exist that outline best-practice guidelines for writing Electron apps > [0,1]. However, as of today and to the best of my knowledge, no real study > exists in order to correctly understand the security that Electron can offer > all these messaging apps we’ve used it to build. > > This is unsustainable. >
I agree but I don't think any criticism is going to stick at this point. Best to just ignore it and watch it burn in 10 years, like Windows XP programs and IE 5 websites back in the day. Make something else better? X -- GPG: ed25519/56034877E1F87C35 GPG: rsa4096/1318EFAC5FBBDBCE https://github.com/infinity0/pubkeys.git _______________________________________________ Messaging mailing list Messaging@moderncrypto.org https://moderncrypto.org/mailman/listinfo/messaging
