3 ms·

Open source is definitely important part. The "trust" I was referring to was deliberately ambiguous. There's not just leap of faith that potential users have to

Open source is definitely important part. The "trust" I was referring to was deliberately ambiguous. There's not just leap of faith that potential users have to make to ensure that there are no deliberate backdoors or flaws in this software - there's also trust that this project will be cared and maintained for over time: bugs will be acknowledged (and even fixed :) ), builds for new platforms will work, security issues will be dealt with... I'm not suggesting that bugs won't be fixed or there are backdoors, and this is definitely a really interesting project. However there's just very little to convince me that I should trust this project for anything more than a throw-away experiment right now. "the project was not initially meant to be OpenSourced" Sounds like an interesting backstory - what's the motivation to open source it so? "Not being famous does not necessarily means being suspicious." It's not being famous that matters here. Publishing software anonymously is unusual (I'm sure there are exceptions here, however they're definitely exceptions). Whenever I read of a new web service or software I generally dig into who is behind it and why they're doing it. Code on its own does not convince you to use it.

ssfdeveloper 11y ago
We are eager to receive reviews and improvements. We have been working on this project for a while and we have no intention to stop now. A motivation for opensourcing it was to get feedbacks and even contributors from community. Every contribution (bug reports, feature requests) will help us to improve the software and that's exactly what we are looking for at this point. We know that trust is a long term process and we invite you to follow the project and give us any feedback that could help us to make the software better. We are currently planning and working on new features. Right now, we are focusing on making the networking part even more modular and extendible (e.g. a transport layer based on UDP rather than TCP). Moreover, an other goal we would like to reach is to make the global framework simpler so that contributors could add to SSF their own features quickly and easily.
- est 11y ago
  Haven't tested, but does SSF support handshake obfuscation? You know, some FW has very intelligent traffic pattern fuzzing capabilities.
  - ssfdeveloper 11y ago
    Currently, SSF only supports standard TLS 1.2 handshake but the new networking design will allow to add new protocols easily. The tunnel implementation (currently TLS over TCP) will be modifiable without impacting the higher networking layers.

ssfdeveloper 11y ago

We are eager to receive reviews and improvements. We have been working on this project for a while and we have no intention to stop now. A motivation for opensourcing it was to get feedbacks and even contributors from community. Every contribution (bug reports, feature requests) will help us to improve the software and that's exactly what we are looking for at this point. We know that trust is a long term process and we invite you to follow the project and give us any feedback that could help us to make the software better. We are currently planning and working on new features. Right now, we are focusing on making the networking part even more modular and extendible (e.g. a transport layer based on UDP rather than TCP). Moreover, an other goal we would like to reach is to make the global framework simpler so that contributors could add to SSF their own features quickly and easily.

est 11y ago
Haven't tested, but does SSF support handshake obfuscation? You know, some FW has very intelligent traffic pattern fuzzing capabilities.
- ssfdeveloper 11y ago
  Currently, SSF only supports standard TLS 1.2 handshake but the new networking design will allow to add new protocols easily. The tunnel implementation (currently TLS over TCP) will be modifiable without impacting the higher networking layers.