google-code-export / ttrss-reader-fork

Automatically exported from code.google.com/p/ttrss-reader-fork
1 stars 2 forks source link

increase network security - enhancement #245

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Hello. 

The guardianproject created a number of libraries for developers to use in 
their software to improve their security.

I would like to make the suggestion that you implement their NetCipher[1] 
libraries into ttrss-reader-fork.

The biggest benefits would be

1. Sane cipher suite choices to improve the security to https instances of 
tt-rss
2. socks proxy support
3. support for Orbot (tor for android) with out the need to have a rooted device

[1] https://guardianproject.info/code/netcipher/

Original issue reported on code.google.com by httpl...@gmail.com on 19 Jun 2014 at 5:06

GoogleCodeExporter commented 9 years ago
Sorry this should have been marked as "enhancement" not "defect".

This would also help with ticket #229

Original comment by httpl...@gmail.com on 19 Jun 2014 at 5:31

GoogleCodeExporter commented 9 years ago

Original comment by nils.braden on 7 Aug 2014 at 5:30

GoogleCodeExporter commented 9 years ago

Original comment by nils.braden on 7 Aug 2014 at 5:31

GoogleCodeExporter commented 9 years ago
I recently had a look at this library and decided not to include it in this app.

Reasons:
  * The mentioned libraries include several other (third party) libraries themselves.
  * "Sane cipher suite choices" change regularly and I don't want to rely on some library to get updates for this
  * Socks-Proxy support was not brought to my attention as desirable yet
  * TOR with a reader which only communicates with your own server is quite useless

Original comment by nils.braden on 21 Oct 2014 at 9:05

GoogleCodeExporter commented 9 years ago
I forgot to mention: There is actually one star on a ticket to add SOCKS5 proxy 
support.

Original comment by nils.braden on 21 Oct 2014 at 9:08