Hi all, Am 18.05.2017 um 22:35 schrieb Remko Tronçon: > Hi Andrey, > > My 2 cents: > > - For [5] (brought up by Germán Máquez Mejía): Things like 'trial and > error' sound like a bad idea if they can be avoided, especially in a > spec around encryption. I addressed this by adding the recipient JID in > the key elements in PR #463, which guarantees the keys are > collision-free (as device IDs are guaranteed to be unique per JID).
The idea behind the "trial and error" approach (already taken into account in PR #460) was not to be so verbose with the JIDs. Remko's approach simplifies the logic quite a bit and seems a reasonable solution. My only question is: Are there any potential privacy issues here? I don't see any, but maybe someone would. BTW I just submitted my bachelor thesis on this topic: https://userpage.fu-berlin.de/mancho/OMEMO.pdf (in German) > > thanks, > Remko > > > On 18 May 2017 at 12:57, Andrey Gursky <[email protected] > <mailto:[email protected]>> wrote: > > Hi, > > On Wed, 17 May 2017 16:59:53 +0100 Dave Cridland wrote: > > [ cut ] > > > A lengthy discussion ensued on this list, involving both Matthew > > Hodgson and others who clearly know a lot more about Crypto than I do. > > None of their arguments were answered. Remko supplied a PR to match > > these. It seems to be being ignored, then rejected out of hand. > > My emails [1..4] and an email from another one [5] regarding OMEMO > remained also without a response. > > Trying to discuss a quick fix of OMEMO jingle file-transfer was also > not welcome [6] :( > > [ cut ] > > Regards, > Andrey > > > [1] > https://mail.jabber.org/pipermail/standards/2016-December/031723.html > <https://mail.jabber.org/pipermail/standards/2016-December/031723.html> > [2] > https://mail.jabber.org/pipermail/standards/2016-December/031724.html > <https://mail.jabber.org/pipermail/standards/2016-December/031724.html> > [3] > https://mail.jabber.org/pipermail/standards/2016-December/031725.html > <https://mail.jabber.org/pipermail/standards/2016-December/031725.html> > [4] > https://mail.jabber.org/pipermail/standards/2016-December/031736.html > <https://mail.jabber.org/pipermail/standards/2016-December/031736.html> > [5] > https://mail.jabber.org/pipermail/standards/2016-December/031739.html > <https://mail.jabber.org/pipermail/standards/2016-December/031739.html> > [6] > https://mail.jabber.org/pipermail/standards/2016-December/031737.html > <https://mail.jabber.org/pipermail/standards/2016-December/031737.html> > _______________________________________________ > Standards mailing list > Info: https://mail.jabber.org/mailman/listinfo/standards > <https://mail.jabber.org/mailman/listinfo/standards> > Unsubscribe: [email protected] > <mailto:[email protected]> > _______________________________________________ > > > > > _______________________________________________ > Standards mailing list > Info: https://mail.jabber.org/mailman/listinfo/standards > Unsubscribe: [email protected] > _______________________________________________ >
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: [email protected] _______________________________________________
