Re:Attack of the Week: Group Messaging in WhatsApp and Signal
by sasas on Thursday January 11, 2018 @06:17AM
(#16122932)
> It's a fenced ecosystem which claims to establish a secure communication but does not.
Your concern extends for all systems that require centralisation. Possibly one example of a chat client which addresses the concerns you raise is Ricochet [1].
Your Ricochet messaging client instance acts as a Tor hidden service. Your add contacts by their ricochet ID which is derived from an onion address. There is no central server / service involved. Everything is direct p2p between your messaging client and your peers.
The source code has been audited by NCC group [2].
It's limited - text only, no attachments, no voice.
If your threat model includes adversaries such as nation states, then this is perhaps the tool to use for simple text messaging.
Your concern extends for all systems that require centralisation. Possibly one example of a chat client which addresses the concerns you raise is Ricochet [1].
Your Ricochet messaging client instance acts as a Tor hidden service. Your add contacts by their ricochet ID which is derived from an onion address. There is no central server / service involved. Everything is direct p2p between your messaging client and your peers.
The source code has been audited by NCC group [2].
It's limited - text only, no attachments, no voice.
If your threat model includes adversaries such as nation states, then this is perhaps the tool to use for simple text messaging.
[1] https://ricochet.im/
[2] https://ricochet.im/files/ricochet-ncc-audit-2016-01.pdf