Ask / Submit
47

whisperpush (Encrypted SMS)

asked 2014-01-05 20:13:51 +0300

slaveriq gravatar image

It would be really awesome if we would get build in whisperpush/encrypted sms support. (like CM did Whisperpush secure messaging integration)

edit retag flag offensive close delete

Comments

15

Shall we rather request a plugin architecture open enough for adding Whisperpush encryption (or any other encryption/message channel) by third parties?

I mean with all the respect to secure messaging, there is no industry standard yet, so let's just support 3rd parties for using whatever they like.

Artem ( 2014-01-05 23:13:45 +0300 )edit
2

I'd rather first have GPG available for Mail on the Jolla.

Venty ( 2014-01-06 11:37:53 +0300 )edit

... and OTP would do too...

cy8aer ( 2014-01-07 11:28:19 +0300 )edit

Gnupg2 is here (though you have to build gpg-agent manually at the moment).

marsch ( 2014-01-28 13:40:48 +0300 )edit

1 Answer

Sort by » oldest newest most voted
21

answered 2014-01-08 22:08:45 +0300

jbrooks gravatar image

It's great technology. I'll ramble a bit here about my personal opinion (which, of course, represents nobody else):

Personally, I'd be more interested in seeing a third party effort (as a separate application - or, architecture permitting, a middleware feature). The method used by Cyanogenmod's integration has some downsides:

  1. Discovering other encryption-enabled users works by comparing your contact list to users registered with a server (operated by Open Whispersystems, I believe). I'm not fond of that as a design (it seems like a great opportunity for a downgrade attack..), and I think it's irresponsible to have your platform depend on infrastructure you don't have a relationship with. See https://whispersystems.org/blog/contact-discovery/ for a discussion on the contact discovery problem.

  2. The Whisperpush implementation used by Cyanogenmod uses Google's push notification architecture to send messages instead of SMS when possible (similar to iMessage). We have no equivalent, and it wouldn't be compatible. The encryption over SMS is useful, but certainly couldn't be enabled by default anywhere (due to compatibility/fallback issues, message overhead, etc).

It's a shame to see all of these new pro-privacy technologies (including iMessage, etc.) being implemented in a platform and vendor specific way. Companies like Apple and Google are using SMS replacements as an excuse to increase their own control over their users and platform. TextSecure is fantastic, and Cyanogenmod's integration by default is mostly a positive step, but it's not suitable - yet - to start acting as a true cross-platform and cross-vendor solution.

I would be thrilled if the community ported TextSecure.. ;)

edit flag offensive delete publish link more

Comments

6

Yes please, TextSecure. +1

m2 ( 2014-02-18 10:50:50 +0300 )edit
1

TextSecure would be awesome!

forgrimm ( 2014-12-04 01:46:53 +0300 )edit
2

how is TextSecure different in that regard? As far as I understand it whisperpush is just a rebranding of it

simonschmeisser ( 2015-01-21 12:33:10 +0300 )edit
Login/Signup to Answer

Question tools

Follow
11 followers

Stats

Asked: 2014-01-05 20:13:51 +0300

Seen: 1,135 times

Last updated: Jan 08 '14