Live data from Hacker News

Saying goodbye to encrypted SMS/MMS

whispersystems.org

1–10 of 78 posts

Re: Saying goodbye to encrypted SMS/MMS

#4
"We don’t want the state-run telcos in Saudi, Iran, Bahrain, Belarus, China, Egypt, Cuba, USA, etc… to have direct access to the metadata of TextSecure users in those countries or anywhere else."

I <3 Moxie.

Re: Saying goodbye to encrypted SMS/MMS

#5
Lack of GCM was one of their primary reasons for not providing an APK for TextSecure for users who don't use Google Play (like users with CyanogenMod).

- https://github.com/WhisperSystems/TextSecure/issues/127 - http://support.whispersystems.org/customer/portal/articles/1...

Hopefully that option will be available soon.

Re: Saying goodbye to encrypted SMS/MMS

#6
post #4

"We don’t want the state-run telcos in Saudi, Iran, Bahrain, Belarus, China, Egypt, Cuba, USA, etc… to have direct access to the metadata of TextSecure users in those countries or anywhere else." I <3 Moxie.

You will like him more if you read why Saudi is the first one in that list.

Re: Saying goodbye to encrypted SMS/MMS

#7

Lack of GCM was one of their primary reasons for not providing an APK for TextSecure for users who don't use Google Play (like users with CyanogenMod). - https://github.com/WhisperSystems/TextSecure/issues/127 - http://support.whispersystems.org/customer/portal/articles/1... Hopefully that option will be available soon.

They will still rely on GCM for the wakeup event so I don't see why it'd make any difference. Presumably the plan is that TextSecure will store the messages and when the app is open, it will build its own connection to the TextSecure servers until the app shuts down. But eliminating GCM entirely would mean the app must run all the time, understand how to handle the NAT timeouts and the servers would need to handle millions of simultaneous TCP connections - a tall order.

This is especially true because GCM is treated specially by lots of telcos and they won't time out GCM sessions automatically. TextSecure wouldn't benefit from that.

Re: Saying goodbye to encrypted SMS/MMS

#8
post #4

"We don’t want the state-run telcos in Saudi, Iran, Bahrain, Belarus, China, Egypt, Cuba, USA, etc… to have direct access to the metadata of TextSecure users in those countries or anywhere else." I <3 Moxie.

The flip side is that identifying all users running TextSecure will get a lot easier, I presume. Previously telcos saw encrypted SMS (sometimes) and connections to GCM. Now they will see connections to TextSecure.

Re: Saying goodbye to encrypted SMS/MMS

#9

Lack of GCM was one of their primary reasons for not providing an APK for TextSecure for users who don't use Google Play (like users with CyanogenMod). - https://github.com/WhisperSystems/TextSecure/issues/127 - http://support.whispersystems.org/customer/portal/articles/1... Hopefully that option will be available soon.

They will still rely on GCM for the wakeup event so I don't see why it'd make any difference. Presumably the plan is that TextSecure will store the messages and when the app is open, it will build its own connection to the TextSecure servers until the app shuts down. But eliminating GCM entirely would mean the app must run all the time, understand how to handle the NAT timeouts and the servers would need to handle mi…

whatsapp and fb messenger work perfectly without google play services installed. whatsapp even manages to update itself. i see no reason why TextSecure could not do it. It's an app that is focused on privacy, and as such should work without closed source software from the largest data collector in the world installed on the phone.
Post reply on HN