- One method could be a Linux laptop and using SSH to talk over devzat [1] They should generate a site-specific ssh key to talk to your devzat instance. The d

- One method could be a Linux laptop and using SSH to talk over devzat [1] They should generate a site-specific ssh key to talk to your devzat instance. The developer is here on HN. Configure devzat to listen on port 443. To do this as a non-root account use "setcap cap_net_bind_service=+ep /path/to/devzat". They have a live instance both of you could try out. Using SSH takes most of the risk of compromised state-run certificate authorities out of the picture. - If the goal is to have voice chat then install uMurmur [2] on your router or a VM or any node that is publicly reachable. They should use Mumble on a Linux laptop but if they had to use a cell phone then there is the Mumla app to talk to your uMurmur instance. uMurmur takes a couple minutes to set up. Self-hosted uMurmur reduces the risk of utilizing platforms that have a "wink wink nod nod" relationship with the state. Either use LetsEncrypt or a self signed cert if you do not trust LE. He cannot be sure his phone or device isn't compromised. Most of the Linux distributions today can be run from RAM first to ensure that the OS works prior to installing it. Your friend can burn a few USB thumb drives with different distributions and find one that suits them best. They could even continue just running Linux from RAM and leaving the internal disk untouched. I agree that in politically unstable locations the phone can not be even remotely trusted. It must be put into airplane mode and then shut down and put into a shielded phone case. [1] - https://github.com/quackduck/devzat https://github.com/quackduck/devzat [2] - https://github.com/umurmur/umurmur/wiki/Configuration https://github.com/umurmur/umurmur/wiki/Configuration