search

cocodelabs / znc-palaver

ZNC module for push notifications
MIT License
112 stars 14 forks source link

Make Push notifications without chat text an option #8

Closed klyonrad closed 11 years ago

klyonrad commented 11 years ago

Feature request could be a "security" feature; since as far as I understand, push notifications are sent unencrypted. Some people might dislike that

(sorry if this here isn't the right place for feature requests)

kylef commented 11 years ago

Push notifications are sent over TLS (Transport Layer Security) which is a form of encryption.

Can you elaborate on your request? I can't make any sense of what you are asking for.

klyonrad commented 11 years ago

to be honest; I had to look this up to find something more precise. When I heard a dev of threema talking about push notifications, he said that they can't the the message's content because of their end2end encryption. That's where my request comes from ;)

So after this, I just thought "APNS is unencrypted". Now I learned about in more detail :) However, as far as I understand, Apple could still technically read into the push notifications, right? (this is also mentioned in this article under security best practices)

So there might be certain people who might dislike it that Apple technically can read into their mentions; especially because the sender who mentions you has no indication what route his/her message is gonna take. Or if there is a company which has it's own IRC server....

kylef commented 11 years ago

It may theoretically be possible for Apple to read push notifications, but it would be against the privacy laws and they wouldn't be able to legally read it. Push notifications are sent to Apple via TLS, it's down to Apple to send the notification to your phone. End-to-end encryption is not possible.

If a user doesn't wish to receive push notifications, they can hit deny when the device is prompted to enable push notifications (or just never use the ZNC module). Additionally the next major version of Palaver will allow the user to add exclusions to notifications for certain channels, nicks or keywords.