search

ricochet-im / ricochet

Anonymous peer-to-peer instant messaging
https://ricochet.im/
Other
3.7k stars 399 forks source link

Ricochet browser protocol handler #97

Open hsribei opened 10 years ago

hsribei commented 10 years ago

Click a ricochet:id link on a web page, have it bring up Ricochet's add contact or chat screen (existing contact).

https://developer.mozilla.org/en/docs/Web-based_protocol_handlers

special commented 9 years ago

I could see this being convenient in some cases, but I'm not sure how much. Before doing this, we should take some time to think about any anonymity issues it could cause.

For users that don't already have ricochet installed, the dialog when trying to open it would be useless. On some systems, it could even be dangerous: I think Windows has a feature to query for URI handling applications from Microsoft servers, which would reveal that the user is trying to use Ricochet.

For another example, is there a way for a web page to tell (without user interaction) whether a handler for a URI type is installed? That would be a dangerous information leak.