this post was submitted on 31 Mar 2021
14 points (100.0% liked)

Privacy

33192 readers
573 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I recently made a post talking about how im using briar but wanted ppl to recommend other apps but this article talks about some problems of those apps https://serpentsec.1337.cx/secure-messaging-choosing-a-chat-app

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 3 years ago (1 children)

Also: are XMPP's voice calls (jingle) E2EE?

[–] [email protected] 2 points 3 years ago (1 children)

I've read a few months ago that voice calls via Conversations IM are E2EE. Alas forgot where I read that. Anyone ?

[–] [email protected] 2 points 3 years ago (1 children)

The new implementation standard (as used in Conversations) AFAIK uses p2p WebRTC, which is encrypted by default.

[–] [email protected] 2 points 3 years ago (1 children)

Yes, but back in June 2020 it sent the keys over transport encryption, not inside OMEMO, meaning it was effectively transport encrypted and not E2EE.
I'm asking whether that changed.
For reference: https://github.com/iNPUTmice/Conversations/issues/1234#issuecomment-644670884

[–] [email protected] 4 points 3 years ago

Calls do not use OMEMO, but instead use DTLS-SRTP - which is still end-to-end encrypted as only both devices have the keys for the calls.

That said, as of a few weeks ago, Conversations does use verified OMEMO keys in the handshake to display a shield on the call: https://github.com/iNPUTmice/Conversations/releases/tag/2.9.8 (note that this requires that you have physically scanned the QR code of your contact's OMEMO key).