ooorlllyyy

4 ms·

1. 1.▲
   by ooorlllyyy 13y ago

   (I mentioned PFS and CP because I perceive them as paradigmatically analogous to the threat model I described - suppose that not ALL of DDG's queries are MITM'd, and yours weren't when you first connected, but you're afr
2. 2.▲
   by ooorlllyyy 13y ago

   That's not really what I was getting at though. Let's say I don't think the NSA has backdoored all the mainstream fablines, but have reason to fear being individually targeted, and assume that the NSA has the power to coerc
3. 3.▲
   by ooorlllyyy 13y ago

   Wait a second, wouldn't this statement imply that things like cert-pinning and PFS are completely useless? Does skepticism of remote patching while trust of the original chip not protect you against being specially targeted if you assu
4. 4.▲
   by ooorlllyyy 13y ago

   Woah, this is seriously cool stuff. I wonder how far off it is from general readiness?
5. 5.▲
   by ooorlllyyy 13y ago

   That's very unfortunate. I really wish that stuff like this would take a greater priority.
6. 6.▲
   by ooorlllyyy 13y ago

   Do you know of any non-Java (ideally GTK+) ZRTP+Jingle clients?
7. 7.▲
   by ooorlllyyy 13y ago

   Could you point me to any software packages that use XMPP/Jingle with ZRTP? Also, do you know how the key distribution is managed with ZRTP?