4 ms·

Perhaps you can get a second impression- details of threat model- https://www.surespot.me/documents/threat.html https://www.surespot.me/documents/threat.html

Perhaps you can get a second impression- details of threat model- https://www.surespot.me/documents/threat.html https://www.surespot.me/documents/threat.html details of how surespot works including crypto- https://www.surespot.me/documents/how_surespot_works.html https://www.surespot.me/documents/how_surespot_works.html you can always review the code on GitHub- https://github.com/surespot/android https://github.com/surespot/android

ig1 13y ago
You should have a look at: https://www.owasp.org/index.php/Threat_Risk_Modeling https://www.owasp.org/index.php/Threat_Risk_Modeling To understand the standard approaches to threat modelling. It should be trivial for someone to look at the documentation and quickly answer basic security questions like "Does it defend against replay attacks ?" and "Does it leak message size ?"