3 ms·
WhisperSystems: Voice and Text Encryption for Android
- shareme 16y agoa question: They do not use SIP are they injecting a third party switch in order to avoid having to use Sip and thus opening themselves up to the legal back door they mention?
- damaja 16y agoPretty sure that ZRTP negotiates the session over the media layer (RTP.. thus Zimmerman RTP), thus avoiding the need for a switch to any other system outside the two users to set up the call.
- pieter 16y agoHow do you verify the identity of the other person? That is, how do they prevent man in the middle attacks?
- wmf 16y agoThey're using SMS for call setup, which is unlikely to be MITMed. Also see http://en.wikipedia.org/wiki/ZRTP#Authentication http://en.wikipedia.org/wiki/ZRTP#Authentication
- phunel 16y agoAnyone in the HN community working on PGP encryption for the iPhone/Android? Not in the hushmail vein, but using the Thunderbird/Enigmail implementation of GnuPG as the model instead? Thoughts?