News for hackers. Stuff that matters.
Re:Google to Implement IETF's Message Layer Security (MLS) S... by chrismorgan on Saturday November 11, 2023 @03:41AM (#38228559)
RFC 9420: https://www.rfc-editor.org/rfc/rfc9420.html. Its abstract:

> Messaging applications are increasingly making use of end-to-end security mechanisms to ensure that messages are only accessible to the communicating endpoints, and not to any servers involved in delivering messages. Establishing keys to provide such protections is challenging for group chat settings, in which more than two clients need to agree on a key but may not be online at the same time. In this document, we specify a key establishment protocol that provides efficient asynchronous group key establishment with forward secrecy (FS) and post-compromise security (PCS) for groups in size ranging from two to thousands.

So, it’s just the end-to-end encryption stuff with double ratcheting and such, not anything about a particular message format.

Re:Google to Implement IETF's Message Layer Security (MLS) S... by M2Ys4U on Saturday November 11, 2023 @06:08AM (#38229245)
>So, it’s just the end-to-end encryption stuff with double ratcheting and such, not anything about a particular message format. This makes it a very valuable element for interoperability, and I think might make bridging work better?; but it’s not sufficient for mixing messaging services in any way, nor is Google proposing anything like XMPP of “implement this and you can federate with our service”.

There's ongoing work at the IETF to create a new protocol called MIMI (More Instant Messaging Interoperability)[0], which will use MLS as its E2E crypto layer.

There are Google reps on the working group, amongst others.

[0] https://datatracker.ietf.org/group/mimi/about/

Re:Google to Implement IETF's Message Layer Security (MLS) S... by RenThraysk on Saturday November 11, 2023 @06:15AM (#38229279)
MLS is built upon ART, Asynchronous Ratcheting Trees.