安全评估？Signal Private Messanger

[Tony Yang]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

在Google Play上看到Signal Private Messanger， 协议和代码均开源，End-to-end encryption for texting and messaging, via data connections. 可以取代Android的SMS App.

协议细节是在https://github.com/WhisperSystems/Signal-Android/wiki/ProtocolV2。比较在意key的验证方式，虽然这方面太渣看不懂……

Best regards,

Sincerely,
Tony Yang

-----BEGIN PGP SIGNATURE-----
Version: Mailvelope v1.3.6
Comment: https://www.mailvelope.com
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=kCyW
-----END PGP SIGNATURE-----

[Justin Wong]

然后开发者被Apple雇了……

http://techcrunch.com/2016/02/25/apple-hires-developer-behind-signal-edward-snowdens-favorite-secure-chat-app/#labnol

 

--

Justin Wong

 

--

 

---

You received this message because you are subscribed to the Google Groups "TUNA 主邮件列表" group.

To unsubscribe from this group and stop receiving emails from it, send an email to tuna-general...@googlegroups.com.

To post to this group, send email to tuna-g...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

 

[Tony Yang]

协议是科学的我觉得就没问题……反之都有问题吧……

Best regards,

Sincerely,

Tony Yang

[Tony Yang]

恩……在PGP和S/MIME基础上提供了deniability，即宣布这条消息不是我发送的能力。

然后forward secrecy. 的确是有其优越性的。

Best regards,

Sincerely,

Tony Yang