nextleap-project / countermitm

thoughts on countering mitm-attacks on autocrypt

15 stars 5 forks source link

discuss use cases of group/contact protocols #65

Closed hpk42 closed 5 years ago

hpk42 commented 6 years ago

there are multiple use cases wrt to group/contact invite/join:

initiate a verified chat contact/group in a public room (assume a powerful in-room camera adversary)
initiate a verified chat contact/group in a concealed setting (no observer assumed)
let people contact/join via print-outs, eg business cards.

These use cases lead to different demands on "freshness" and dis/allowing re-use of codes and should be discussed more explicitely in countermitm.

azul commented 6 years ago

66 addresses the related protocol properties (in particular confidential oob vs. non-confidential). A discussion of the use cases is still missing though.

azul commented 5 years ago

I think we elaborate enough about this on the protocol level. Usecase discussion probably better fits within the context of concrete implimentations such as delta.chat. @hpk42, what do you think? can we close this?

hpk42 commented 5 years ago

yip, agreed.