3 ms·

Is Tox secure ? Compared to tinfoil chat

• Jfreegman 12y ago
  Tox is DHT/P2P based which means it does not rely on any type of centralized authority, and all traffic is encrypted using the sodium crypto library (https://github.com/jedisct1/libsodium https://github.com/jedisct1/libsodium). Full disclosure: Tox has not yet been professionally audited.
• ex-contributor 12y ago
  Tox still hasn't solved the serious metadata leakage issue. They tried to cover it up by adding onion-routing for friend requests, but ACTUAL MESSAGES are still done directly. Strong adversaries such as your ISP and agencies like the NSA, the GCHQ, etc. can still collect metadata about your conversations. The "Tox Foundation" tries to cover this up and pretend that "tox was never meant to be anonymous", but the truth is harsh. Now, this wouldn't be a problem if the Tox Foundation made this issue clear to its users. This is how P2P works, after all, direct connections, and that's fine. But the problem is that Tox doesn't make that obvious for non-tech-savvy users. When they read on the website that they are completely safe from the NSA and whatnot, they won't expect to be in any way exposed. Still, unless these non-tech-savvy users "route all incoming and outgoing traffic through Tor" they won't be completely safe and should be worried about metadata leakage and adding people they don't actually know. But such a thing isn't made clear and Tox deceives users this way, only to get more people using it. It's unethical and outright wrong, in my personal opinion.
  • urras 12y ago
    Again, don't listen to this guy. He just copies and pastes this stuff from 4chan.
    • veeti 12y ago
      So what? It's a completely valid point.
    • tmalsburg2 12y ago
      Which part of what he wrote is wrong? Please explain.