search

ge0rg / aprsdroid

APRSdroid - Geo-Location for Radio Amateurs
https://aprsdroid.org/
GNU General Public License v2.0
505 stars 96 forks source link

Security Level #377

Open lelikan-code opened 3 months ago

lelikan-code commented 3 months ago

I couldn't find any documentation regarding the security of the application. Is there any encryption protocol applied to data sent from person to person?

penguin359 commented 3 months ago

FCC regulations in the US prohibit encryption on amateur radio services (with some exceptions like satellite telecommand). APRS itself has no encryption defined so isn't a standard to follow anyways if this app was used in countries that might allow encryption.

lelikan-code commented 3 months ago

What I am curious about is not a general broadcast. After all, if I am only going to talk to one person, I would want it to be sent only to them.

penguin359 commented 3 months ago

Yes, that is exactly what I am talking about, point-to-point communications with an entity. However, there is no specification for any kind of encryption in APRS or AX.25 which APRS uses for it's transport. Even if there was, I would not be able to test it as it's illegal to use in the United States and in the United Kingdom, the latter is home to the original author. If you are in a country that allows encryption, you are free to come up with your own specification for encryption, fork APRSdroid, and add support for it.

na7q commented 3 months ago

What I am curious about is not a general broadcast. After all, if I am only going to talk to one person, I would want it to be sent only to them.

You're in the wrong place. You should be looking at meshtastic, not ham radio. Based on your statements, I assume you're not a license ham operator either.

lelikan-code commented 3 months ago

I assume you are not using the latest versions of VARA HF. The AES256 encryption option is available there. :)

penguin359 commented 3 months ago

Yes, I actually am aware of that feature in VARA HF and it is licensed for non-HAM use only. In fact, when using a HAM callsign, it is disabled. From what you are describing, it sounds like Meshtastic in non-HAM mode would suit your use case far better.

Out of curiosity, what country will you be operating in with this?