One thing I see people saying on here is that people should care....and I do...but I don't know _what_ to do with it! Can someone show/tell me what I, an average person, can do? It feels a bit overwhelming and things like this point out how powerless we really are. I hope I'm wrong and there are things we can do...I just don't know what they are. EDIT - Asking two more specific questions: 1. What can we do technicall…
I would like to see mobile end-to-end secure communications apps that allow for users to have completely encrypted message passing.
I had the following idea - please tell me if this would work:
You have a distributed truecrypt file system with a client that the users run on their device, and intermediate cloud storage.
Each user device is a "folder" on the file system - messages are effectively truecrypt encrypted files that gave saved out to the remote folder that == the recipient.
The system would notify you that you have a new file that has been pushed to your folder - you can then decrypt and read it.
However - I feel that the weakness would be in the required key/passwd to open the files -- this might not be securable.
It may require that folders between two users have a known password on each eand - and that for every contact/recipient you would have to have a separate key (they could be the same value, but still separate) thus a communication looks like this
[typed mesage] --> [truecrypt'ed file] --> [to: folder] --> [routing engine/store and forward] --> [from: folder] --> [truecrypt decrypt by user] --> [user reads message]
But in a mobile environment...
Anyway - half baked stream-of-thought idea... Why would this not work?