<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 04/11/14 17:43, Joseph Bonneau
wrote:<br>
</div>
<blockquote
cite="mid:CAOe4UikStsETR12TDTT1UnsxTL19ONYKOHCv6ZPtV_1M22XXAA@mail.gmail.com"
type="cite">
<div dir="ltr">First version launched today: <a
moz-do-not-send="true"
href="https://www.eff.org/secure-messaging-scorecard"
target="_blank">https://www.eff.org/secure-messaging-scorecard</a>
<div><br>
</div>
<div>This was a collaboration between tech advisers (primarily
Peter Eckersley and myself) and a good team of people with
experience in journalism and activism and there were
necessarily some compromises made. The primary goals here
were:</div>
<div><br>
</div>
<div>(a) simplicity for users (and journalists) to draw some
conclusions about what's out there right now and we had to
make a lot of compromises to keep things simple for end-users
to understand.</div>
<div><br>
</div>
<div>(b) reasonable carrots for some of the traditional
messaging apps to add security features, get audits, and
publish source code.</div>
<div><br>
</div>
<div>Hopefully we will be launching a more detailed version next
year with many more evaluation criteria but would be curious
to hear feedback on this version from other folks working in
this space.</div>
<div><br>
</div>
<div>Cheers,</div>
<div><br>
Joe</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Messaging mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Messaging@moderncrypto.org">Messaging@moderncrypto.org</a>
<a class="moz-txt-link-freetext" href="https://moderncrypto.org/mailman/listinfo/messaging">https://moderncrypto.org/mailman/listinfo/messaging</a>
</pre>
</blockquote>
<br>
Since when is Skype "Encrypted so the provider can’t read it?" That
might have been the case a very long time ago but now certainly is
not true anymore, just considering this:
<a class="moz-txt-link-freetext" href="http://arstechnica.com/security/2013/05/think-your-skype-messages-get-end-to-end-encryption-think-again/">http://arstechnica.com/security/2013/05/think-your-skype-messages-get-end-to-end-encryption-think-again/</a>
(i take it by "provider" you mean the server provider, otherwise
that would just be pretty much the same as "encrypted in transit"?)<br>
Generally for Applications which are not open source it will be very
hard to prove that "the provider can't read it".<br>
Also, i encountered a snag when clicking on the "sort by" column
headings, apparently they turn black (on black background) once they
have been visited.<br>
Regards,<br>
<br>
S<br>
</body>
</html>