Crypho – Encrypted enterprise messaging

Re:Crypho – Encrypted enterprise messaging by cyphar on Monday January 25, 2016 @02:14AM (#10966019)

The crypto choices are quite odd (not using OTR or something like it, using ElGamal and not other standard curves). The logging policy is also broader than I'd like. We should really be pushing for Ricochet (which anonymises your social graph using Tor hidden services and uses OTR for the end-to-end encryption) to have a mobile app and better user experience and just get everyone to use that.

[ Parent | on HN ]

Re:Crypho – Encrypted enterprise messaging by Freak_NL on Monday January 25, 2016 @04:05AM (#10966254)

Ricochet looks interesting (https://ricochet.im/), but can it scale with TOR as the means of transport?

As much as I like the notion of anonymous communication, I wonder if the TOR network can grow beyond its current state in order to be used reliably for this type of service. From what I understand, TOR needs lots of independent exit nodes to offer dependable anonymity and have enough bandwidth, but running an exit node seems to open you up to serious legal consequences because of content passing through it that may be illegal in your jurisdiction. Doesn't that rule out normal consumers running an exit node at home?

[ Parent | on HN ]

Re:Crypho – Encrypted enterprise messaging by DKnoll on Monday January 25, 2016 @06:26PM (#10970806)

Richochet is a service on the Tor network, thus it would not hit exit nodes, only relays; an exit node is only required to reach traditional internet services, not hidden services.

[ Parent | on HN ]