11–20 of 147 posts
Earlier quoted context omitted.
Tox is distributed meaning it doesn't rely on any central servers.
This would be good to note in the post, since right now it's easy to decide not to click anything because there are so many links and the salient feature is never mentioned prior to visiting them!
Thank you.
Posts without URLs are penalized. You might want to repost this using the most appropriate URL, then add your text as a comment to the post. If you like, email us at hn@ycombinator.com with a link to the new post and we'll look it over for you. Edit: this one seems to be doing fine.
Reading HN full time as a job must be extremely enjoyable. :)
What about its design makes it secure? Do you guys have a design document or a description of how you've implemented security? Have any security experts audited the code?
What about its design makes it secure? Do you guys have a design document or a description of how you've implemented security? Have any security experts audited the code?
What about its design makes it secure? Do you guys have a design document or a description of how you've implemented security? Have any security experts audited the code?
Connections between friends are encrypted.
is the crypto used.
https://github.com/irungentoo/toxcore/blob/master/docs/Tox_m...
describes the protocol used to connect securely to friends after they find themselves.
This protocol has PFS, message padding to prevent length based leaking and should be immune against replay attacks.
What makes it secure is that you know the long term public key of your friends making it really easy for the software to establish secure connections to them.
Any chance of an iOS client any time soon?
Not any time soon, as iOS isn't very FLOSS friendly (in fact, the GPL is not compatible with the Apple app store). There have been talks of making a licensing exception, but the iOS client with the most progress ( https://github.com/Jman012/Toxicity ) isn't functional at the moment.
Any chance of an iOS client any time soon?
Not any time soon, as iOS isn't very FLOSS friendly (in fact, the GPL is not compatible with the Apple app store). There have been talks of making a licensing exception, but the iOS client with the most progress ( https://github.com/Jman012/Toxicity ) isn't functional at the moment.
What about its design makes it secure? Do you guys have a design document or a description of how you've implemented security? Have any security experts audited the code?
An audit is currently planned when the core stabilizes.
What about its design makes it secure? Do you guys have a design document or a description of how you've implemented security? Have any security experts audited the code?
Every peer is identified by a curve25519 public key. To add someone as a friend, you add that public key. Connections between friends are encrypted. http://nacl.cr.yp.to/box.html is the crypto used. https://github.com/irungentoo/toxcore/blob/master/docs/Tox_m... describes the protocol used to connect securely to friends after they find themselves. This protocol has PFS, message padding to prevent length based leaking…