[guardian-dev] Fwd: [whispersystems] RedPhone update

Abel Luck abel at guardianproject.info
Sun Jun 9 05:31:47 EDT 2013


Bernard Tyers - ei8fdb:
> I guess people are sub'ed to the WhisperSystems, for those who are not...
> 
> (This is the user interactions of the TOFU protocol we spoke about before)
> 

I'm not sure it is. This is about RedPhone. The previous thread was
about TextSecure.

It does look like moxie's trying to make the experience in TextSecure
more similar to RedPhone/ZRTP where you TOFU without verification, and
then are alerted if it changes.

~abel

> 
> 
> Begin forwarded message:
> 
>> From: Moxie Marlinspike <moxie at thoughtcrime.org>
>> Date: 8 June 2013 20:15:36 GMT+01:00
>> To: whispersystems at lists.riseup.net
>> Subject: Re: [whispersystems] RedPhone update
>> Reply-To: Moxie Marlinspike <moxie at thoughtcrime.org>
> 
> 
>> Hey Matej, you're correct, it's a key continuity feature.
> 
>> If the SAS is yellow, that indicates you're dealing with a "new" call.
> 
>> If the text is white, that indicates you're dealing with security that
>> is a continuation of a previous call you've verified with that
>> recipient.  If you feel that you took appropriate measures verifying the
>> SAS in the previous call, it is not necessary to verify the SAS again.
> 
>> Make sense?
> 
>> - moxie
> 
>> On 06/07/2013 01:03 AM, Matej Kovacic wrote:
>>> Hi,
>>>
>>> I have seen RedPhone update yesterday. When I call someone now I have a
>>> checkmark next to the two SAS words.
>>>
>>> What is a function of it?
>>>
>>> It seems it is a part of key continuity. When I click it it disappears,
>>> and after next call does not appear anymore. But there is no notice that
>>> session is verified (from previous session).
>>>
>>> Regards,
>>>
>>> Matej
>>>
>>>
> 
>> -- 
>> http://www.thoughtcrime.org
> 
> --------------------------------------
> Bernard / bluboxthief / ei8fdb
> 
> IO91XM / www.ei8fdb.org
> 
> _______________________________________________
> Guardian-dev mailing list
> 
> Post: Guardian-dev at lists.mayfirst.org
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
> 
> To Unsubscribe
>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>         Or visit: https://lists.mayfirst.org/mailman/options/guardian-dev/abel%40guardianproject.info
> 
> You are subscribed as: abel at guardianproject.info
> 



More information about the Guardian-dev mailing list