31–40 of 43 posts
You should probably just use Wormhole.
pip install magic-wormholeEarlier quoted context omitted.
I've been using Magic Wormhole for all my peer-to-peer file transfers and love it.
Who runs the rendezvous server for MW?
https://magic-wormhole.readthedocs.io/en/latest/welcome.html...
tl,dr:
- Rendezvous server is a public one - You can run your own - Code is in the `wormhole` library.
Earlier quoted context omitted.
I've been using Magic Wormhole for all my peer-to-peer file transfers and love it.
Who runs the rendezvous server for MW?
notably, you can run your own
(o) https://magic-wormhole.readthedocs.io/en/latest/welcome.html...
How does this compare to keybase?
I'm a user but no expert about keybase. As far as I can tell they've pivoted to taking on Slack & friends with zero-knowledge team-chat, but global. Good luck to them! We're not in a hurry to try and move people off Slack or GnuPG: teams have their existing services (Slack, G-suite) and other workflows like Thunderbird + Enigmail, git signing etc. We think complementing those existing flows is the way to go. The long…
What? I'm pretty curious what gave you this impression, as I've always seen their chat app as an interesting use built on top of their encrypted file system work, but in no way their primary use-case or business.
We (and everyone else I know that uses Keybase) use it for passing around sensitive information, either through chat, their encrypted Git repos, encrypted messages plopped into emails, etc.
I think Fluidkeys is cool and all, but I definitely wouldn't switch off of Keybase for it, and I think you're doing yourself a disservice by pretending that Keybase is "just another chat app" now and not a direct competitor that also has secure communication built in.
#!/bin/sh
gpg -d The tool for this that everyone I know uses is Magic Wormhole. Wormhole has a more straightforward security model and is more thoughtfully designed: it uses a PAKE and relies on out-of-band secret sharing, rather than attempting a registry of "verified" public keys. You should probably just use Wormhole. pip install magic-wormhole
The tool for this that everyone I know uses is Magic Wormhole. Wormhole has a more straightforward security model and is more thoughtfully designed: it uses a PAKE and relies on out-of-band secret sharing, rather than attempting a registry of "verified" public keys. You should probably just use Wormhole. pip install magic-wormhole
Isn't there only 65K passwords/magic keywords in wormhole ? What if someone constantly bruteforce all of these combinations, wouldn't he get access to the files that you are sending ?
https://magic-wormhole.readthedocs.io/en/latest/attacks.html
Earlier quoted context omitted.
I've been using Magic Wormhole for all my peer-to-peer file transfers and love it.
Who runs the rendezvous server for MW?
I do. You can use your own, but then both sides have to type in the same --relay-url=URL value (instead of using the one that's baked into the app).
magic-wormhole is both a file-transfer tool and a library for provisioning/transferring secrets via a code. If you were embedding the library in your own app, you might want to bake in a different relay server (which you run) to avoid depending upon me for your uptime.
The tool for this that everyone I know uses is Magic Wormhole. Wormhole has a more straightforward security model and is more thoughtfully designed: it uses a PAKE and relies on out-of-band secret sharing, rather than attempting a registry of "verified" public keys. You should probably just use Wormhole. pip install magic-wormhole
Isn't there only 65K passwords/magic keywords in wormhole ? What if someone constantly bruteforce all of these combinations, wouldn't he get access to the files that you are sending ?
For the attacker to have a 50/50 chance of successfully stealing your file transfer, you'd have to (on average) re-run the `wormhole send` program over 30000 times. I don't know about you, but I'm not that patient, and I'd give up long before they had a significant chance of success :).
The tool for this that everyone I know uses is Magic Wormhole. Wormhole has a more straightforward security model and is more thoughtfully designed: it uses a PAKE and relies on out-of-band secret sharing, rather than attempting a registry of "verified" public keys. You should probably just use Wormhole. pip install magic-wormhole