<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" style="display:none"></style> </head> <body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;"> I'd rather not appeal to authority or social graphs to decide what's worth using.<br> <p><br> </p> <p>Pond and Ricochet both use Tor, but they are very different. Pond has a server, while Ricochet does not. Pond uses the Axolotl Ratchet. Here's how Ricochet is designed:</p> <p><a id="lnk936730" href="https://github.com/ricochet-im/ricochet/blob/master/doc/design.md">https://github.com/ricochet-im/ricochet/blob/master/doc/design.md</a></p> <p><br> </p> <p>It's great that someone is working on some highly anonymous chat, and I hope the project matures and that we can all learn something from it, but I don't think this or any peer to peer system is practical for mass adoption.</p> <p><br> </p> Most people want to be able to send a message at any time, then turn off their device. And nobody wants to lose incoming messages just because they go offline for a short while.<br> <p><br> </p> <div style="color: rgb(33, 33, 33);"> <hr tabindex="-1" style="display:inline-block; width:98%"> <div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Messaging <messaging-bounces@moderncrypto.org> on behalf of zaki@manian.org <zaki@manian.org><br> <b>Sent:</b> Friday, September 19, 2014 4:31 PM<br> <b>To:</b> Tim Bray<br> <b>Cc:</b> messaging<br> <b>Subject:</b> Re: [messaging] fyi: metadata-eliminating tor-based chat program: Ricochet</font> <div> </div> </div> <div> <div dir="ltr">The person who goes the by pseudonym "the grunq" is very knowledgeable member of the security community based on his excellent blog, twitter account and social graph. His contribution to and endorsement of this project seems to be the reason to take it seriously. <br> <br> <div>I haven't taken a close look at the protocol yet but I expect it would be reasonably well informed by the prior efforts in this space. Pond's design seems to indicate that if can assume the directory of contacts-> cryptographic identities doesn't leak metadata and you provide enough cover traffic to the Tor network you can provide metadata protection of messaging against a global passive network attacker. From what I've read so far, Richochet seems to something along the same lines.</div> <div><br> </div> <div><br> </div> <div class="gmail_extra"> <div> <div dir="ltr"></div> </div> <br> <div class="gmail_quote">On Fri, Sep 19, 2014 at 1:38 PM, Tim Bray <span dir="ltr"> <<a href="mailto:tbray@textuality.com" target="_blank">tbray@textuality.com</a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex"> <div dir="ltr"> <div class="gmail_default" style="font-size:small">A number of things about this one made me kind of uneasy. The clichéd tone of the article “high-school dropout trumps NSA!” The complete absence of input from anyone who wasn’t a project insider, and the dissing of competitors who are actually shipping working software. I mentioned on Twitter that a couple of things about the story made my BS filter twitch, and I got slimed by multiple project partisans (nobody I’ve ever heard of) for being a hater, etc. I looked at the github repo and if any development is actually happening, it’s not there; no commits to the actual code for a couple months. Now, none of those things in & of itself is reason to dismiss Ricochet, but I have to say my BS filter is doing more than twitching.</div> </div> <div class="gmail_extra"> <div> <div><br> <div class="gmail_quote">On Fri, Sep 19, 2014 at 12:32 PM, =JeffH <span dir="ltr"> <<a href="mailto:Jeff.Hodges@kingsmountain.com" target="_blank">Jeff.Hodges@kingsmountain.com</a>></span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex"> this is just fyi/fwiw, I haven't investigated this other than skimming the article..<br> <br> Middle-School Dropout Codes Clever Chat Program That Foils NSA Spying [ricochet]<br> <a href="http://www.wired.com/2014/09/new-encrypted-chat-program-thwarts-nsa-eliminating-metadata" target="_blank">http://www.wired.com/2014/09/<u></u>new-encrypted-chat-program-<u></u>thwarts-nsa-eliminating-<u></u>metadata</a><br> <br> <a href="https://github.com/ricochet-im/ricochet" target="_blank">https://github.com/ricochet-<u></u>im/ricochet</a><br> <br> <br> also mentioned..<br> <br> Wickr<br> Tox<br> TorChat<br> <br> <br> <br> <br> <br> <br> <br> <br> <br> <br> ______________________________<u></u>_________________<br> Messaging mailing list<br> <a href="mailto:Messaging@moderncrypto.org" target="_blank">Messaging@moderncrypto.org</a><br> <a href="https://moderncrypto.org/mailman/listinfo/messaging" target="_blank">https://moderncrypto.org/<u></u>mailman/listinfo/messaging</a><br> </blockquote> </div> <br> <br clear="all"> <div><br> </div> </div> </div> <span><font color="#888888">-- <br> <div dir="ltr"> <div>- Tim Bray (If you’d like to send me a private message, see <a href="https://keybase.io/timbray" target="_blank"> https://keybase.io/timbray</a>)</div> </div> </font></span></div> <br> _______________________________________________<br> Messaging mailing list<br> <a href="mailto:Messaging@moderncrypto.org" target="_blank">Messaging@moderncrypto.org</a><br> <a href="https://moderncrypto.org/mailman/listinfo/messaging" target="_blank">https://moderncrypto.org/mailman/listinfo/messaging</a><br> <br> </blockquote> </div> <br> </div> </div> </div> </div> </body> </html>