search

purism / purist

Purist Services
GNU General Public License v3.0
2 stars 2 forks source link

Encrypted Instant Messaging #7

Open toddatpurism opened 8 years ago

toddatpurism commented 8 years ago

Create an Encrypted Instant Messaging Service

Initially this can be jabber/xmpp based.

toddatpurism commented 8 years ago

Server Side:

Client Side:

Off-The-Record needed

Mobile

Desktop

joeyh-purism commented 8 years ago

Prosody has a plugin to allow LDAP authentication, which we will use.

joeyh-purism commented 8 years ago

While we want to use OTR to fully encrypt communications between clients, we also need transport level security, for two reasons:

  1. To encrypt the metadata of who is communicating with who.
  2. Because users may not always choose to, or be able to use OTR. (Although we could modify the clients to warn when users are not using OTR.)

The XMPP server should be limited to opening TLS encrypted connections with other XMPP servers and with clients, and never un-encrypted connections. It should do proper checking of server certificates. XMPP servers sometimes are configured to not bother with that.

joeyh-purism commented 8 years ago

To configure the XMPP client, we need https://github.com/purism/purist/issues/14