Secure chat

Secure chat

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Secure chat Juergen Nieveler 09-13-2005
Posted by Juergen Nieveler on September 13, 2005, 6:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I'm looking into setting up a secure chat system using only readily
available components. So far I'm using PSI to connect to a
Jabber-server using TOR as a proxy. This achieves end-to-end encryption
of the actual messages (GPG-integration in PSI), client-to-server
encryption using SSL between PSI and the Jabber server, and modest
protection against traffic analysis by using TOR.

As I see it, that leaves only two things open: The amount of traffic
going over my TOR connection, and the fact that the Jabber-server will
know who I send messages to. The first can be taken care of by creating
random traffic over the TOR link when not chatting.

Is there such a thing as Onion-Routing-Messaging, or a Mixmaster-like
Jabber system to take care of the second issue?

Juergen Nieveler
--
Man who fart in church sit in own pew.


Posted by Volker Birk on September 13, 2005, 10:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> I'm looking into setting up a secure chat system using only readily
> available components.

You could use i.e. SILC. There is a lack of anonymizing, though.

> As I see it, that leaves only two things open: The amount of traffic
> going over my TOR connection, and the fact that the Jabber-server will
> know who I send messages to. The first can be taken care of by creating
> random traffic over the TOR link when not chatting.
> Is there such a thing as Onion-Routing-Messaging, or a Mixmaster-like
> Jabber system to take care of the second issue?

The random traffic is needed to avoid knowing anybody, when you're
communicating.

Yours,
VB.
--
"Es kann nicht sein, dass die Frustrierten in Rom bestimmen, was in
deutschen Schlafzimmern passiert".
Harald Schmidt zum "Weltjugendtag"


Similar ThreadsPosted
Gmail chat hacked? November 5, 2008, 11:34 pm
How secure is ADS NAS kit? August 3, 2005, 3:44 am
Have I done enough to secure my PC? January 17, 2006, 3:30 am
Is SSL/TSL really secure? March 27, 2006, 11:41 pm
RSA Secure ID Username January 24, 2005, 3:53 am
GoToMyPC secure? March 27, 2005, 3:52 pm
Secure Software May 6, 2005, 8:42 pm
Secure Banking June 20, 2005, 3:02 pm
Secure Move November 13, 2005, 7:54 pm
Backup secure enough? September 8, 2006, 10:10 am

The site map in XML format XML site map

Contact Us | Privacy Policy