search

guardianproject / ChatSecureAndroid

This project has ended, but ChatSecure iOS continues. For Android, please use Conversations or Zom instead
https://chatsecure.org/blog/chatsecure-conversations-zom/
Apache License 2.0
1.07k stars 521 forks source link

[Feature request] Automagic contacts #404

Open XayOn opened 10 years ago

XayOn commented 10 years ago

Instant messaging is evolving towards phoneish applications like whatsapp or more recently, telegram.

XMPP + OTR are both great stuff, but they lack that "inmediat response" that you have with your phone. Basically, the hability to use the phone itself to authenticate and add as friends all your current phone agenda.

This could be achieved, on a server with rfc3921 and xep-0055 by searching all the users with the matching phones, then adding them, maybe just a "Sync with phone" option.

jrub commented 10 years ago

:+1:

sucotronic commented 10 years ago

:+1:

scento commented 10 years ago

From my point of view, this feature could be useful but wouldn't achieve what the user expects. Everyone can run his own XMPP server - so in the most cases not all friends use the same server and then a description like "Sync with phone" would be misleading since it is impossible to "sync all contacts" of the phone.

The process of "add and authenticate a friend" could also be achieved trough the transfer of the OTR fingerprint, a security key and the XMPP ID via QR-Code or NFC. After adding the own account (XMPP ID, OTR fingerprint), the security key could be used to trust the other ones account via XMPP.

Wouldn't it be great if you could simply hold two phones together to add each other as a contact?

n8fr8 commented 10 years ago

On 02/22/2014 10:20 AM, scento wrote:

Wouldn't it be great if you could simply hold two phones together to add each other as a contact?

That is a great idea, and something we are definitely working on, as well as QR code based add+trust automagic.

I also think in the future (i.e. next 6-12 months) we will shift from a multiple account mentality to a "let's connect with your friends wherever they are". This means, you can choose a contact from your address book, and depending upon what information they have, we'll know where to find them to contact them.

What we really don't want to do is take your whole address book and shove it to a centrally hosted server, and by extension "leak" the contents of your address book, just so you can automagically find your friends. It is a sensitive task to do this type of friend matching in a private way, but something we are thinking about.

+n