News for hackers. Stuff that matters.

A comment on CryptoCat iOS Application Penetration Test [pdf]. Parent comment

Re:CryptoCat iOS Application Penetration Test [pdf] by moxie on Wednesday April 02, 2014 @10:24PM (#7520527)
These are bugs, but I'm not sure they are what you think they are. I would be worried if TextSecure indicates a message is going to be sent securely, but it is sent insecurely. This bug, however, is an edge case where TextSecure indicates that it is going to send a message insecurely, and that's what it does.

It's also true that until recently we didn't have an encrypted group chat protocol, but at no point in the past did TextSecure ever indicate that group chat was encrypted. Just the opposite.

It's important to realize that TextSecure is simultaneously a standard unencrypted SMS app as well as an encrypted chat app.

[ Parent | on HN ]
Re:CryptoCat iOS Application Penetration Test [pdf] by drdaeman on Thursday April 03, 2014 @04:59AM (#7521678)
> encrypted group chat protocol

Sorry to bother, but is there any article/blog post/something to read about that?

As XMPP MUCs don't seem to have E2E encryption, mpOTR seems to be in infancy, and I'm unaware of anything else, this sounds really interesting.

[ Parent | on HN ]