Sunsetting Tor Messenger
blog.torproject.org
Sunsetting Tor Messenger
1–10 of 71 posts
Re: Sunsetting Tor Messenger
#2I find Tox[1] to be a reasonable messenger.
Re: Sunsetting Tor Messenger
#3I find Tox[1] to be a reasonable messenger. [1] https://tox.chat/
I tried it a while back but never really liked it. Clunky UI and the project in general seemed to have a lot of problems. The kickstarter project was basically a ripoff, the project management is (or at least was) scattered and basically non-existing.
I have much better experience with Matrix[1]/Riot[2].
Matrix is an open protocol with end-to-end encryption (still beta IIRC) and is federated (like IRC) rather than fully distributed.
Matrix is now a stable project with funding and riot has a future business plan to also continue develop.
Re: Sunsetting Tor Messenger
#4I find Tox[1] to be a reasonable messenger. [1] https://tox.chat/
There's a lot of shady stuff surrounding Tox though see:
https://github.com/irungentoo/toxcore/issues/1379
Also:
https://blog.tox.im/2016/04/01/litigation/
I rather support KeyBase or Wire (Open Source back-end exists and I think the clients are open source too!) as an alternative. I'm leaning cleanly toward Wire, though everyone I've suggested KeyBase to enjoys it. I like the free storage of KeyBase... sue me.
Edit:
Wire Github: https://github.com/wireapp
Re: Sunsetting Tor Messenger
#5Retroshare now provides a Tor version: https://retroshareteam.wordpress.com/2018/03/13/release-note...
> Running Retroshare over Tor has a number of definite advantages: it does not require firewall management (Tor does it for you); you do not need a DHT to find your friends (Tor does it for you), and whatever code is tied to ensuring security of your IP information is not needed anymore.
Re: Sunsetting Tor Messenger
#6ricochet[1] is my preferred option for situations that would require something like tor messenger (which is very few situations, but I digress). I like that the UX has a built-in threat model (e.g. "do you really want to click on this?")
TAILS users can't use it because tor-over-tor is weird (ricochet uses its own tor process). but it looks like it's getting close.[2]
Re: Sunsetting Tor Messenger
#7Matrix.org/Riot.im has all the encryption you could wish for, a modern, useful interface, and a federated model in which everyone can run their own server and talk to everyone else, just like email.
Re: Sunsetting Tor Messenger
#8I find Tox[1] to be a reasonable messenger. [1] https://tox.chat/
Read that:
https://github.com/TokTok/c-toxcore/issues/426
Note: The interesting part is not the vulnerability itself, that is relatively minor. The interesting part is where the tox developers explain that they don't really understand their code.
Re: Sunsetting Tor Messenger
#9ricochet[1] is my preferred option for situations that would require something like tor messenger (which is very few situations, but I digress). I like that the UX has a built-in threat model (e.g. "do you really want to click on this?") TAILS users can't use it because tor-over-tor is weird (ricochet uses its own tor process). but it looks like it's getting close.[2] 1. https://ricochet.im/ 2. https://labs.riseup.ne…
I have been looking for info on why tor over tor is bad and would love to understand the technical reason why, can you share any links?
All I have been able to find is related to uncertainty is it is good or not
Re: Sunsetting Tor Messenger
#10Matrix.org/Riot.im has all the encryption you could wish for, a modern, useful interface, and a federated model in which everyone can run their own server and talk to everyone else, just like email.
>>> just like email.
That won't be enough for the average Tor Messenger user. Email's failings were the impetus behind both instant messaging and Tor. Users don't want/need federated models. Security aside, they want a convenient little app that will receive messages instantly while online but doesn't have to remain online 24/7.