[guardian-dev] Fwd: [whispersystems] RedPhone update
Abel Luck
abel at guardianproject.info
Sun Jun 9 05:31:47 EDT 2013
Bernard Tyers - ei8fdb:
> I guess people are sub'ed to the WhisperSystems, for those who are not...
>
> (This is the user interactions of the TOFU protocol we spoke about before)
>
I'm not sure it is. This is about RedPhone. The previous thread was
about TextSecure.
It does look like moxie's trying to make the experience in TextSecure
more similar to RedPhone/ZRTP where you TOFU without verification, and
then are alerted if it changes.
~abel
>
>
> Begin forwarded message:
>
>> From: Moxie Marlinspike <moxie at thoughtcrime.org>
>> Date: 8 June 2013 20:15:36 GMT+01:00
>> To: whispersystems at lists.riseup.net
>> Subject: Re: [whispersystems] RedPhone update
>> Reply-To: Moxie Marlinspike <moxie at thoughtcrime.org>
>
>
>> Hey Matej, you're correct, it's a key continuity feature.
>
>> If the SAS is yellow, that indicates you're dealing with a "new" call.
>
>> If the text is white, that indicates you're dealing with security that
>> is a continuation of a previous call you've verified with that
>> recipient. If you feel that you took appropriate measures verifying the
>> SAS in the previous call, it is not necessary to verify the SAS again.
>
>> Make sense?
>
>> - moxie
>
>> On 06/07/2013 01:03 AM, Matej Kovacic wrote:
>>> Hi,
>>>
>>> I have seen RedPhone update yesterday. When I call someone now I have a
>>> checkmark next to the two SAS words.
>>>
>>> What is a function of it?
>>>
>>> It seems it is a part of key continuity. When I click it it disappears,
>>> and after next call does not appear anymore. But there is no notice that
>>> session is verified (from previous session).
>>>
>>> Regards,
>>>
>>> Matej
>>>
>>>
>
>> --
>> http://www.thoughtcrime.org
>
> --------------------------------------
> Bernard / bluboxthief / ei8fdb
>
> IO91XM / www.ei8fdb.org
>
> _______________________________________________
> Guardian-dev mailing list
>
> Post: Guardian-dev at lists.mayfirst.org
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>
> To Unsubscribe
> Send email to: Guardian-dev-unsubscribe at lists.mayfirst.org
> Or visit: https://lists.mayfirst.org/mailman/options/guardian-dev/abel%40guardianproject.info
>
> You are subscribed as: abel at guardianproject.info
>
More information about the Guardian-dev
mailing list