pde3

9 ms·

1. 61.▲
   by pde3 12y ago

   It wasn't clear to us whether the NSA intercepts Skype by breaking the crypto, or by compelling injection of false public keys in order to perform a man in the middle attack. In the latter case it's the third checkmark (lack of a
2. 62.▲
   by pde3 12y ago

   For the record, we aren't endorsing CryptoCat or any of the other tools that got 7/7: ChatSecure, TextSecure, Signal/RedPhone, SilentText, SilentPhone, or the ones that are close like Pidgin+OTR, Subrosa, Surespot, Telegram,
3. 63.▲
   by pde3 12y ago

   That's why we view this Scorecard as the opening in a campaign to evaluate both the usability and security of messaging tools. Traditional cipherpunk designs are unusable by humans, and a lot more work is going to be needed to build t
4. 64.▲
   by pde3 12y ago

   Some extra info for commenters in this thread: This Scorecard is phase 1 of our multi-stage campaign for Secure and Usable Crypto. We believe these criteria are necessary for any strong security tool, though meeting them doesn't guara
5. 65.▲
   by pde3 12y ago

   We do have experts reviewing them. Which items are false?