News for hackers. Stuff that matters.

A comment on Tox – An encrypted P2P chat protocol that does not rely on central servers. Parent comment

Re:Tox – An encrypted P2P chat protocol that does not rely o... by Arathorn on Sunday January 06, 2019 @07:00PM (#18841597)
We're not aware of any bugs where Matrix clients lose your e2e keys (other than one where changing your password may cause clients to log out and remove keys for safety). If you saw it keep losing keys, i'm going to guess you configured your browser to delete local storage when you close the tab... in which case, unless you export the keys, we have nowhere else to store them.

That said, we've also just implemented the optional ability to encrypt and backup your keys on the server, but obviously comes with other tradeoffs.

In terms of security, the core crypto has been audited, as per https://matrix.org/blog/2016/11/21/matrixs-olm-end-to-end-en...

[ Parent | on HN ]
Re:Tox – An encrypted P2P chat protocol that does not rely o... by im3w1l on Sunday January 06, 2019 @07:35PM (#18841784)
It hasn't happened in a year (I still use it) so whatever the issue was I don't see it anymore :)
[ Parent | on HN ]
Re:Tox – An encrypted P2P chat protocol that does not rely o... by crtasm on Monday January 07, 2019 @06:41AM (#18844434)
I tested riot.im in a private Firefox window recently, obvious with hindsight but it didn't occur to me I should export keys and I didn't spot anything in the interface to make me aware or prompt me to action.

Great to hear you've added the option for server stored keys now.

[ Parent | on HN ]
Re:Tox – An encrypted P2P chat protocol that does not rely o... by Arathorn on Monday January 07, 2019 @08:42AM (#18844968)
yeah, it's a tricky one because by the time you've closed the window, it's too late to export keys.

The new online key backup stuff landed a few weeks ago on the develop branch, and will be making it onto the main release over the coming weeks :)

[ Parent | on HN ]