Live data from Hacker News

Saying goodbye to encrypted SMS/MMS

whispersystems.org

11–20 of 78 posts

Re: Saying goodbye to encrypted SMS/MMS

#11
post #10

That makes no sense because SMS-compatibility is the trojan horse to get adoption. Without SMS it's just another messaging app with huge network-effect adoption challenges.

The app will still be capable of plaintext sms. encrypted messages just won't use sms as a transport layer

Re: Saying goodbye to encrypted SMS/MMS

#12
I hope this also eventually means moving away from using phone numbers as the sole mechanism for identity. While it is and was useful to build up a meaningful userbase and resist spammers, it also hinders a lot of useful usage patterns.

Re: Saying goodbye to encrypted SMS/MMS

#13
post #6
post #4

"We don’t want the state-run telcos in Saudi, Iran, Bahrain, Belarus, China, Egypt, Cuba, USA, etc… to have direct access to the metadata of TextSecure users in those countries or anywhere else." I <3 Moxie.

You will like him more if you read why Saudi is the first one in that list.

In case anyone else is looking for the story: http://www.thoughtcrime.org/blog/saudi-surveillance/

Re: Saying goodbye to encrypted SMS/MMS

#14
That's unfortunate. Encrypted SMS/MMS has been my primary use for TextSecure.

For contacts that have intermittent or expensive data connections, especially while roaming, the ability to use SMS was a selling point vs other messaging systems.

Telco's in my country record and store SMS data for a period and knowing this data was encrypted and unreadable by them was another useful feature of TextSecure.

Re: Saying goodbye to encrypted SMS/MMS

#15

Earlier quoted context omitted.

They will still rely on GCM for the wakeup event so I don't see why it'd make any difference. Presumably the plan is that TextSecure will store the messages and when the app is open, it will build its own connection to the TextSecure servers until the app shuts down. But eliminating GCM entirely would mean the app must run all the time, understand how to handle the NAT timeouts and the servers would need to handle mi…

whatsapp and fb messenger work perfectly without google play services installed. whatsapp even manages to update itself. i see no reason why TextSecure could not do it. It's an app that is focused on privacy, and as such should work without closed source software from the largest data collector in the world installed on the phone.

Facebook and WhatsApp are much bigger players with massive infrastructure that Whisper Systems doesn't have.

I agree it would be a lot better if it didn't require Google Play Services, but I'm not sure how realistic that is. Google has worked hard to make the Play APIs indispensable for anyone trying to work with Android.

Re: Saying goodbye to encrypted SMS/MMS

#17
its been kind of nice to have textsecure as an option when internet is not available (which sadly happens a lot especially for travelers...)

I understand the decision is, again, for the greater good, but I can't help to think it's going to leave a hole.

Re: Saying goodbye to encrypted SMS/MMS

#18
post #10

That makes no sense because SMS-compatibility is the trojan horse to get adoption. Without SMS it's just another messaging app with huge network-effect adoption challenges.

That bit about how the rest of the world isn't clamouring for more SMS? It's very true where I came from. The reason WhatsApp got so huge was because it was one of the first apps that allowed you to completely forgo SMS in favour of a 3g-backed messaging service, which was hell of a lot cheaper.

What I'm trying to say is, very few people here care about SMS compatibility.

Re: Saying goodbye to encrypted SMS/MMS

#19
post #10

That makes no sense because SMS-compatibility is the trojan horse to get adoption. Without SMS it's just another messaging app with huge network-effect adoption challenges.

You can still send unencrypted SMS messages to people who don't use TextSecure. You can still send encrypted messages to people who do use TextSecure. All you lose is the ability to send encrypted SMS messages to people who are already using TextSecure; instead you must send messages through the Internet.

Re: Saying goodbye to encrypted SMS/MMS

#20

I hope this distinction is called out effectively in the UI. It would be a real disaster if people thought they were sending secure SMS, when actually they were using plaintext, or got confused between which are SMS messages and which are TextSecure messages.

It is. secure messages are blue (and the send button has a lock on it), text messages are green. Similar to how iOS does iMessage/SMS messages.
Post reply on HN