Adam Langley's Pond: Secure Async Messaging

Re:Adam Langley's Pond: Secure Async Messaging by losvedir on Saturday July 13, 2013 @10:32PM (#6039667)

> For secure, synchronous communication we have OTR and, when run over Tor, this is pretty good. But while we have secure asynchronous messaging in the form of PGP email, it's not forward secure and it gratuitously leaks traffic information.

This is probably a stupid question, but what exactly is the distinction here? Why can't we just think of the "asynchronous messaging" email-equivalent as long, drawn-out synchronous OTR communication?

[ Parent | on HN ]

Re:Adam Langley's Pond: Secure Async Messaging by johntb86 on Saturday July 13, 2013 @11:20PM (#6039798)

Can you send a message to someone who's currently offline using OTR? It seems to use diffie helman, so I'd expect not.

[ Parent | on HN ]

Re:Adam Langley's Pond: Secure Async Messaging by chongli on Sunday July 14, 2013 @07:50AM (#6040648)

That's an implementation detail. You could pack the handshake into automated email messages handled by a proper client. Obviously this would not work with any old client since you're effectively layering another protocol on top of email.

[ Parent | on HN ]