4 ms·
https://app.wire.com https://app.wire.com already has that feature and it is based on signal protocol.
by deepstack 6y ago
https://app.wire.com https://app.wire.com already has that feature and it is based on signal protocol.
- uoaei 6y agoHas it been audited by external, independent security researchers?
- Bancakes 6y agoYes, it's open source and anyone can look at the source code instead of appealing to authority.
- uoaei 6y agoThat's not what I asked. Generally laypeople are not going to be good judges of whether or not an encryption protocol is sufficiently secure. Has it been audited by security researchers?
- Bancakes 6y agoYou're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs? To answer your question, I don't know if Wire's been audited by paid researchers. I personally prefer a customer-exposed product whose each commit you can look up rather than the remote promise of security in a locked and hidden program.
- hashhar 6y agoWhy can't it be both? Bitwarden is open-source (both the server and clients) AND has been independently audited for a security review.
- saagarjha 6y ago> You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs? This is usually a good assumption.
- uoaei 6y agoIt is not impossible to create code which looks like it does one thing while simultaneously doing ya-mother. http://underhanded-c.org/ http://underhanded-c.org/
- gsich 6y ago"look" is a weak word. Anyone with eyes can look.
- AvocadoCake 6y agohttps://wire.com/en/security/#audits https://wire.com/en/security/#audits Yes, with published reports, but it looks like they haven't published new ones in a few years.
- arkadiyt 6y agoWire uses MLS [1], it has nothing to do with the Signal protocol. [1]: https://messaginglayersecurity.rocks/ https://messaginglayersecurity.rocks/
- sdfzug 6y agoafaik Wire works on MLS like many others do - but according to Wikipedia Wire uses the Signal Protocol. Your "source" does not back up your claim
- creata 6y agoI just read the Wikipedia page and it says, emphasis mine: > Wire's instant messages are encrypted with Proteus, a protocol that Wire Swiss developed based on the Signal Protocol. That doesn't sound like "Wire uses the Signal Protocol" to me.