From 8cd3a05182bd6bc55d283bce11ee9a72ea55f96e Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sat, 18 Apr 2020 04:39:04 +0000 Subject: [PATCH 01/12] Cleanup 2.0 instant messenger page --- _includes/sections/instant-messenger.html | 173 ++++++++++------------ _includes/sections/teamchat.html | 8 +- assets/img/svg/3rd-party/bitmessage.svg | 2 - assets/img/svg/3rd-party/tox-dark.svg | 2 - assets/img/svg/3rd-party/tox.svg | 2 - 5 files changed, 88 insertions(+), 99 deletions(-) delete mode 100644 assets/img/svg/3rd-party/bitmessage.svg delete mode 100644 assets/img/svg/3rd-party/tox-dark.svg delete mode 100644 assets/img/svg/3rd-party/tox.svg diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index 88779ff5..96aaddf6 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -1,4 +1,7 @@ -

Encrypted Instant Messengers

+

+ + Encrypted Instant Messengers +

@@ -9,42 +12,45 @@

We have described the three main types of messaging programs that exist: Centralized, Federated and Peer-to-Peer (P2P), with the advantages and disadvantages of each.

-

Centralized

+

+ + Centralized +

Centralized messengers are those where every participant is on the same server or network of servers controlled by the same organization.

Advantages

Disadvantages

{% - include cardv2.html - title="Signal" - image="/assets/img/svg/3rd-party/signal.svg" - description='Signal is a mobile app developed by Signal Messenger LLC. The app provides instant messaging, as well as voice and video calling. All communications are E2EE unless you choose to send as SMS. Its protocol has also been indepedently audited (PDF)' - labels="warning:Requires phone number:Signal requires your phone number as an personal identifier which means anyone you communicate with will see it.|success:VoIP" - website="https://signal.org/" - forum="https://forum.privacytools.io/t/discussion-signal/664" - github="https://github.com/signalapp" - windows="https://signal.org/download/" - mac="https://signal.org/download/" - linux="https://signal.org/download/" - googleplay="https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms" - android="https://signal.org/android/apk/#apk-danger" - ios="https://apps.apple.com/app/signal-private-messenger/id874139669" + include cardv2.html + title="Signal" + image="/assets/img/svg/3rd-party/signal.svg" + description='Signal is a mobile app developed by Signal Messenger LLC. The app provides instant messaging, as well as voice and video calling. All communications are E2EE unless you choose to send as SMS. Its protocol has also been indepedently audited (PDF)' + labels="warning:Requires phone number:Signal requires your phone number as an personal identifier which means anyone you communicate with will see it.|success:VoIP" + website="https://signal.org/" + forum="https://forum.privacytools.io/t/discussion-signal/664" + github="https://github.com/signalapp" + windows="https://signal.org/download/" + mac="https://signal.org/download/" + linux="https://signal.org/download/" + googleplay="https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms" + android="https://signal.org/android/apk/#apk-danger" + ios="https://apps.apple.com/app/signal-private-messenger/id874139669" %} {% @@ -68,27 +74,30 @@ %}
-

Federated

+

+ + Federated +

-

Federated messengers use multiple, independent servers that are able to talk to each other (email is one example of a federated service). Federation allows system administrators to control their own server and still be a part of the larger communications network.

+

Federated messengers use multiple, independent servers that are able to talk to each other (email is one example of a federated service). Federation allows system administrators to control their own server and still be a part of the larger communications network.

-

Advantages

- +

Advantages

+ -

Disadvantages

- +

Disadvantages

+
{% @@ -111,40 +120,44 @@ %}
-

Worth Mentioning

+

Worth Mentioning

+ -

Peer to Peer (P2P)

+

+ + Peer to Peer (P2P) +

-

Peer-to-Peer instant messengers connect directly to each other without requiring third-party servers. Clients (peers) usually find each other through the use of a distributed computing network. Examples of this include DHT (distributed hash table) (used with technologies like torrents and IPFS, for example), or Ethereum's Whisper protocol (used with some newer DApps). Another approach is proximity based networks, where a connection is established over WiFi or Bluetooth (for example, Briar or the Scuttlebutt social networking protocol). Once a peer has found a route to its contact via any of these methods, a direct connection between them is made.

+

Peer-to-Peer instant messengers connect directly to each other without requiring third-party servers. Clients (peers) usually find each other through the use of a distributed computing network. Examples of this include DHT (distributed hash table) (used with technologies like torrents and IPFS, for example), or Ethereum's Whisper protocol (used with some newer DApps). Another approach is proximity based networks, where a connection is established over WiFi or Bluetooth (for example, Briar or the Scuttlebutt social networking protocol). Once a peer has found a route to its contact via any of these methods, a direct connection between them is made.

-

Advantages

+

Advantages

+ + +

Disadvantages

+
{% @@ -176,30 +189,8 @@ ios="https://itunes.apple.com/app/ring-a-gnu-package/id1306951055?mt=8" %} -{% - include cardv2.html - title="Tox" - image="/assets/img/svg/3rd-party/tox.svg" - image-dark="/assets/img/svg/3rd-party/tox-dark.svg" - description='Encrypted instant messaging and video calling software. Uses its own encryption protocol that has not yet been officially audited by cryptographers.' - labels="warning:Experimental:Encryption has not been audited by professional cryptographers|success:VoIP" - website="https://tox.chat" - forum="https://forum.privacytools.io/t/discussion-tox/2115" - windows="https://tox.chat/download.html#oses" - mac="https://tox.chat/download.html#oses" - linux="https://tox.chat/download.html#oses" - freebsd="https://tox.chat/download.html#oses" - openbsd="http://openports.se/search.php?so=tox" - netbsd="http://pkgsrc.se/search.php?so=tox" - fdroid="https://tox.chat/download.html#oses" - googleplay="https://tox.chat/download.html#oses" - ios="https://tox.chat/download.html#oses" -%} -

Worth Mentioning

diff --git a/_includes/sections/teamchat.html b/_includes/sections/teamchat.html index 21cd9064..6c19fdd0 100644 --- a/_includes/sections/teamchat.html +++ b/_includes/sections/teamchat.html @@ -1,7 +1,11 @@ -

Team Chat Platforms

+

+ + + Team Chat Platforms +

{% diff --git a/assets/img/svg/3rd-party/bitmessage.svg b/assets/img/svg/3rd-party/bitmessage.svg deleted file mode 100644 index b4dd6814..00000000 --- a/assets/img/svg/3rd-party/bitmessage.svg +++ /dev/null @@ -1,2 +0,0 @@ - - diff --git a/assets/img/svg/3rd-party/tox-dark.svg b/assets/img/svg/3rd-party/tox-dark.svg deleted file mode 100644 index 13f26fe2..00000000 --- a/assets/img/svg/3rd-party/tox-dark.svg +++ /dev/null @@ -1,2 +0,0 @@ - - diff --git a/assets/img/svg/3rd-party/tox.svg b/assets/img/svg/3rd-party/tox.svg deleted file mode 100644 index 18433b42..00000000 --- a/assets/img/svg/3rd-party/tox.svg +++ /dev/null @@ -1,2 +0,0 @@ - - -- 2.47.2 From 1fe8c97a4d06ae3bb5f1a646657e4be51eed57bd Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sat, 18 Apr 2020 04:53:01 +0000 Subject: [PATCH 02/12] Enough examples mentioned --- _includes/sections/instant-messenger.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index 96aaddf6..f159e8ab 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -140,7 +140,7 @@ Peer to Peer (P2P) -

Peer-to-Peer instant messengers connect directly to each other without requiring third-party servers. Clients (peers) usually find each other through the use of a distributed computing network. Examples of this include DHT (distributed hash table) (used with technologies like torrents and IPFS, for example), or Ethereum's Whisper protocol (used with some newer DApps). Another approach is proximity based networks, where a connection is established over WiFi or Bluetooth (for example, Briar or the Scuttlebutt social networking protocol). Once a peer has found a route to its contact via any of these methods, a direct connection between them is made.

+

Peer-to-Peer instant messengers connect directly to each other without requiring third-party servers. Clients (peers) usually find each other through the use of a distributed computing network. Examples of this include DHT (distributed hash table) (used with technologies like torrents and IPFS, for example). Another approach is proximity based networks, where a connection is established over WiFi or Bluetooth (for example, Briar or the Scuttlebutt social networking protocol). Once a peer has found a route to its contact via any of these methods, a direct connection between them is made.

Advantages

-- 2.47.2 From 70f0b9a089ebd1b6679b85da87ee91b2aa5ff1bb Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sat, 18 Apr 2020 05:06:11 +0000 Subject: [PATCH 03/12] Not recommending other clients --- _includes/sections/instant-messenger.html | 1 - 1 file changed, 1 deletion(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index f159e8ab..3d97bee8 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -123,7 +123,6 @@

Worth Mentioning

    -
  • Other Matrix clients, that may however be less feature complete than Riot.im.
  • XMPP (Extensible Messaging and Presence Protocol) is an open-source communications protocol that began development in 1999. Since then, XMPP has been extended by the publishing of XEPs (XMPP Extension Protocols). OMEMO is the most popular XEP (XMPP extension) for E2EE. Clients are developed by the community and not by the XSF (XMPP Standards Foundation). Inconsistent E2EE
    • Gajim
      • -- 2.47.2 From c3bcc65424b1821c6e2665a6b56422aaf4cbbff5 Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sat, 18 Apr 2020 05:31:52 +0000 Subject: [PATCH 04/12] Remove mention of XMPP --- _includes/sections/instant-messenger.html | 8 -------- 1 file changed, 8 deletions(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index 3d97bee8..661bf8a1 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -123,14 +123,6 @@

      Worth Mentioning

        -
      • XMPP (Extensible Messaging and Presence Protocol) is an open-source communications protocol that began development in 1999. Since then, XMPP has been extended by the publishing of XEPs (XMPP Extension Protocols). OMEMO is the most popular XEP (XMPP extension) for E2EE. Clients are developed by the community and not by the XSF (XMPP Standards Foundation). Inconsistent E2EE
        • - -
      • Kontalk is a community-driven instant messaging network based on XMPP.
      • Status.im - Encrypted instant messenger with an integrated Ethereum wallet (cryptocurrency) that also includes support for DApps (decentralized apps) (web apps in a curated store). Uses the Waku protocol (a fork of Whisper) for P2P communication. Only available for iOS and Android.
      -- 2.47.2 From 691a595d46a44f7c5e5cba21ee731bc3aad70b4b Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sat, 18 Apr 2020 10:18:29 +0000 Subject: [PATCH 05/12] Remove retroshare from instant messenger page --- _includes/sections/instant-messenger.html | 6 --- pages/software/real-time-communication.html | 44 ++++++++++----------- 2 files changed, 22 insertions(+), 28 deletions(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index 661bf8a1..bd225d0f 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -179,9 +179,3 @@ googleplay="https://play.google.com/store/apps/details?id=cx.ring" ios="https://itunes.apple.com/app/ring-a-gnu-package/id1306951055?mt=8" %} - -

      Worth Mentioning

      - -
        -
      • Retroshare - Encrypted instant messaging and voice/video call client. RetroShare supports both Tor and I2P.
        • -
      diff --git a/pages/software/real-time-communication.html b/pages/software/real-time-communication.html index 180e45fe..76a0d6a9 100644 --- a/pages/software/real-time-communication.html +++ b/pages/software/real-time-communication.html @@ -8,73 +8,73 @@ description: "Discover secure and private ways to communicate with others online {% include sections/instant-messenger.html %}

      - - + + - Recent news about breaking E2EE on centralized instant messengers + Recent news about breaking E2EE on centralized instant messengers

      March 2020
      January 2020
      November 2019
      October 2019
      August 2019
      July 2019
      May 2019
      January 2019
      December 2018

      Complete Comparison

      Independent security audits

      -- 2.47.2 From 2854cc94371ad2f2c13c1483ee3e67cb0ec87687 Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sun, 19 Apr 2020 04:03:45 +0000 Subject: [PATCH 06/12] Only recommend Riot, so make it the center focus --- _includes/sections/instant-messenger.html | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index bd225d0f..b6453734 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -102,11 +102,10 @@ {% include cardv2.html - title="Matrix" - image="/assets/img/svg/3rd-party/matrix.svg" - image-dark="/assets/img/svg/3rd-party/matrix-dark.svg" - description='Matrix is an open-source project that publishes the Matrix open standard for secure, decentralized, real-time communication.
      - Riot.im is the popular reference client produced by the Matrix.org team. It offers optional E2EE for 1:1 and group conversations that must be turned on by the user. (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted). In the future it will be on by default.' + title="Riot" + image="/assets/img/svg/3rd-party/riotim.svg" + description='Riot.im is the reference client for the Matrix network. The Matrix open standard is an open-source standard for secure, decentralized, real-time communication.
      + Riot offers optional E2EE for 1:1 and group conversations that must be turned on by the user. (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted). In the future it will be on by default.' website="https://about.riot.im/" forum="https://forum.privacytools.io/t/discussion-riot-im/665/" github="https://github.com/vector-im/riot-web/" -- 2.47.2 From 5bc0992ba194302a11fa459c8a5bb0471ba5970e Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sun, 19 Apr 2020 04:13:05 +0000 Subject: [PATCH 07/12] Use : instead of colon --- _includes/sections/instant-messenger.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index b6453734..e4c5831d 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -104,8 +104,8 @@ include cardv2.html title="Riot" image="/assets/img/svg/3rd-party/riotim.svg" - description='Riot.im is the reference client for the Matrix network. The Matrix open standard is an open-source standard for secure, decentralized, real-time communication.
      - Riot offers optional E2EE for 1:1 and group conversations that must be turned on by the user. (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted). In the future it will be on by default.' + description='Riot.im is the reference client for the Matrix network. The Matrix open standard is an open-source standard for secure, decentralized, real-time communication.
      ' + labels="warning:Warning:Riot offers optional E2EE for 1:1 and group conversations that must be turned on by the user. (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted)." website="https://about.riot.im/" forum="https://forum.privacytools.io/t/discussion-riot-im/665/" github="https://github.com/vector-im/riot-web/" -- 2.47.2 From 8adee387782ea4b193f1756f2d09ccdbb03534a9 Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sun, 19 Apr 2020 04:41:55 +0000 Subject: [PATCH 08/12] =?UTF-8?q?Remove=20strong,=20can=20remove=20this=20?= =?UTF-8?q?warning=20soon=E2=84=A2?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- _includes/sections/instant-messenger.html | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index e4c5831d..41c2e155 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -105,7 +105,8 @@ title="Riot" image="/assets/img/svg/3rd-party/riotim.svg" description='Riot.im is the reference client for the Matrix network. The Matrix open standard is an open-source standard for secure, decentralized, real-time communication.
      ' - labels="warning:Warning:Riot offers optional E2EE for 1:1 and group conversations that must be turned on by the user. (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted)." + labels="warning:Warning:Riot offers optional E2EE for 1:1 and group conversations that must be turned on by the user. + (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted)." website="https://about.riot.im/" forum="https://forum.privacytools.io/t/discussion-riot-im/665/" github="https://github.com/vector-im/riot-web/" -- 2.47.2 From d31260716b84387f9367808232cf3a1281da1fad Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sun, 19 Apr 2020 04:55:25 +0000 Subject: [PATCH 09/12] Pros/cons in colums, move below recommendations --- _includes/sections/instant-messenger.html | 123 ++++++++++++---------- 1 file changed, 69 insertions(+), 54 deletions(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index 41c2e155..581c1027 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -19,23 +19,6 @@

      Centralized messengers are those where every participant is on the same server or network of servers controlled by the same organization.

      -

      Advantages

      -
        -
      • New features and changes can be implemented more quickly.
        • -
      • Easier to get started with and to find contacts.
        • -
      - -

      Disadvantages

      - - {% include cardv2.html title="Signal" @@ -73,6 +56,29 @@ chrome="https://chrome.google.com/webstore/detail/keybase-for-reddit/ognfafcpbkogffpmmdglhbjboeojlefj" %} +
      +
      +
      +

      Advantages

      +
        +
      • New features and changes can be implemented more quickly.
        • +
      • Easier to get started with and to find contacts.
        • +
      +
      +
      +

      Disadvantages

      + +
      +
      +

      @@ -81,25 +87,6 @@

      Federated messengers use multiple, independent servers that are able to talk to each other (email is one example of a federated service). Federation allows system administrators to control their own server and still be a part of the larger communications network.

      -

      Advantages

      -
        -
      • Allows for greater control over your own data when running your own server.
        • -
      • Allows you to choose who to trust your data with by choosing between multiple "public" servers.
        • -
      • Often allows for third party clients which can provide a more native, customized, or accessible experience.
        • -
      • Generally a less juicy target for governments wanting backdoor access to everything as the trust is decentralized. The server may be hosted independently from the organization developing the software.
        • -
      • Server software can be verified that it matches public source code, assuming you have access to the server or you trust the person who does (e.g., a family member)
        • -
      • Third-party developers can contribute code and add new features, instead of waiting for a private development team to do so.
        • -
      - -

      Disadvantages

      -
        -
      • Adding new features is more complex, because these features need to be standardized and tested to ensure they work with all servers on the network.
        • -
      • Some metadata may be available (e.g., information like "who is talking to whom," but not actual message content if E2EE is used).
        • -
      • Federated servers generally require trusting your server's administrator. They may be a hobbyist or otherwise not a "security professional," and may not serve standard documents like a privacy policy or terms of service detailing how your data is utilized.
        • -
      • Server administrators sometimes choose to block other servers, which are a source of unmoderated abuse or break general rules of accepted behavior. This will hinder your ability to communicate with users on those servers.
        • -
      -
      - {% include cardv2.html title="Riot" @@ -119,6 +106,30 @@ web="https://riot.im/app/" %} +
      +
      +
      +

      Advantages

      +
        +
      • Allows for greater control over your own data when running your own server.
        • +
      • Allows you to choose who to trust your data with by choosing between multiple "public" servers.
        • +
      • Often allows for third party clients which can provide a more native, customized, or accessible experience.
        • +
      • Generally a less juicy target for governments wanting backdoor access to everything as the trust is decentralized. The server may be hosted independently from the organization developing the software.
        • +
      • Server software can be verified that it matches public source code, assuming you have access to the server or you trust the person who does (e.g., a family member)
        • +
      • Third-party developers can contribute code and add new features, instead of waiting for a private development team to do so.
        • +
      +
      +
      +

      Disadvantages

      +
        +
      • Adding new features is more complex, because these features need to be standardized and tested to ensure they work with all servers on the network.
        • +
      • Some metadata may be available (e.g., information like "who is talking to whom," but not actual message content if E2EE is used).
        • +
      • Federated servers generally require trusting your server's administrator. They may be a hobbyist or otherwise not a "security professional," and may not serve standard documents like a privacy policy or terms of service detailing how your data is utilized.
        • +
      • Server administrators sometimes choose to block other servers, which are a source of unmoderated abuse or break general rules of accepted behavior. This will hinder your ability to communicate with users on those servers.
        • +
      +
      +
      +

      Worth Mentioning

      @@ -133,24 +144,6 @@

      Peer-to-Peer instant messengers connect directly to each other without requiring third-party servers. Clients (peers) usually find each other through the use of a distributed computing network. Examples of this include DHT (distributed hash table) (used with technologies like torrents and IPFS, for example). Another approach is proximity based networks, where a connection is established over WiFi or Bluetooth (for example, Briar or the Scuttlebutt social networking protocol). Once a peer has found a route to its contact via any of these methods, a direct connection between them is made.

      - -

      Advantages

      -
        -
      • Minimal information is exposed to third parties.
        • -
      • Modern P2P platforms implement end-to-end encryption by default. There are no servers that could potentially intercept and decrypt your transmissions, unlike centralized and federated models.
        • -
      - -

      Disadvantages

      -
        -
      • Reduced feature set:
        • -
          -
        • Messages can only be sent when both peers are online, however, your client may store messages locally to wait for the contact to return online.
          • -
        • Generally increases battery usage on mobile devices, because the client must stay connected to the distributed network to learn about who is online.
          • -
        -
      • Your IP address and that of the contacts you're communicating with may be visible if you do not use the software in conjunction with a self contained network, such as Tor or I2P. Many countries have some form of mass surveillance and/or metadata retention.
        • -
      -
      - {% include cardv2.html title="Briar" @@ -179,3 +172,25 @@ googleplay="https://play.google.com/store/apps/details?id=cx.ring" ios="https://itunes.apple.com/app/ring-a-gnu-package/id1306951055?mt=8" %} + +
      +
      +
      +

      Advantages

      +
        +
      • Minimal information is exposed to third parties.
        • +
      • Modern P2P platforms implement end-to-end encryption by default. There are no servers that could potentially intercept and decrypt your transmissions, unlike centralized and federated models.
        • +
      +
      +
      +

      Disadvantages

      +
        +
      • Reduced feature set:
        • +
          +
        • Messages can only be sent when both peers are online, however, your client may store messages locally to wait for the contact to return online.
          • +
        • Generally increases battery usage on mobile devices, because the client must stay connected to the distributed network to learn about who is online.
          • +
        +
      • Your IP address and that of the contacts you're communicating with may be visible if you do not use the software in conjunction with a self contained network, such as Tor or I2P. Many countries have some form of mass surveillance and/or metadata retention.
        • +
      +
      +
      -- 2.47.2 From 9e188228fd6f0c0a550701264ca13126679e1264 Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sun, 19 Apr 2020 05:03:09 +0000 Subject: [PATCH 10/12] Fix indenting --- _includes/sections/instant-messenger.html | 103 +++++++++++----------- 1 file changed, 53 insertions(+), 50 deletions(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index 581c1027..7cd6afa1 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -56,26 +56,27 @@ chrome="https://chrome.google.com/webstore/detail/keybase-for-reddit/ognfafcpbkogffpmmdglhbjboeojlefj" %} -
      +
      -

      Advantages

      -
        -
      • New features and changes can be implemented more quickly.
        • -
      • Easier to get started with and to find contacts.
        • -
      -
      -
      -

      Disadvantages

      -
        -
      • Centralized services could be more susceptible to legislation requiring backdoor access.
        • -
      • Can include restricted control or access. This can include things like:
        • +

        Advantages

          -
        • Being forbidden from connecting third-party clients to the centralized network that might provide for greater customization or better user experience. Often defined in Terms and Conditions of usage.
          • -
        • Poor or no documentation for third-party developers.
          • +
        • New features and changes can be implemented more quickly.
          • +
        • Easier to get started with and to find contacts.
        -
      • The ownership, privacy policy, and operations of the service can change easily when a single entity controls it, potentially compromising the service later on.
        • -
      +
      +
      +

      Disadvantages

      + +
      @@ -106,27 +107,28 @@ web="https://riot.im/app/" %} -
      +
      -

      Advantages

      -
        -
      • Allows for greater control over your own data when running your own server.
        • -
      • Allows you to choose who to trust your data with by choosing between multiple "public" servers.
        • -
      • Often allows for third party clients which can provide a more native, customized, or accessible experience.
        • -
      • Generally a less juicy target for governments wanting backdoor access to everything as the trust is decentralized. The server may be hosted independently from the organization developing the software.
        • -
      • Server software can be verified that it matches public source code, assuming you have access to the server or you trust the person who does (e.g., a family member)
        • -
      • Third-party developers can contribute code and add new features, instead of waiting for a private development team to do so.
        • -
      -
      -
      -

      Disadvantages

      -
        -
      • Adding new features is more complex, because these features need to be standardized and tested to ensure they work with all servers on the network.
        • -
      • Some metadata may be available (e.g., information like "who is talking to whom," but not actual message content if E2EE is used).
        • -
      • Federated servers generally require trusting your server's administrator. They may be a hobbyist or otherwise not a "security professional," and may not serve standard documents like a privacy policy or terms of service detailing how your data is utilized.
        • -
      • Server administrators sometimes choose to block other servers, which are a source of unmoderated abuse or break general rules of accepted behavior. This will hinder your ability to communicate with users on those servers.
        • -
      +

      Advantages

      +
        +
      • Allows for greater control over your own data when running your own server.
        • +
      • Allows you to choose who to trust your data with by choosing between multiple "public" servers.
        • +
      • Often allows for third party clients which can provide a more native, customized, or accessible experience.
        • +
      • Generally a less juicy target for governments wanting backdoor access to everything as the trust is decentralized. The server may be hosted independently from the organization developing the software.
        • +
      • Server software can be verified that it matches public source code, assuming you have access to the server or you trust the person who does (e.g., a family member)
        • +
      • Third-party developers can contribute code and add new features, instead of waiting for a private development team to do so.
        • +
      +
      +
      +

      Disadvantages

      +
        +
      • Adding new features is more complex, because these features need to be standardized and tested to ensure they work with all servers on the network.
        • +
      • Some metadata may be available (e.g., information like "who is talking to whom," but not actual message content if E2EE is used).
        • +
      • Federated servers generally require trusting your server's administrator. They may be a hobbyist or otherwise not a "security professional," and may not serve standard documents like a privacy policy or terms of service detailing how your data is utilized.
        • +
      • Server administrators sometimes choose to block other servers, which are a source of unmoderated abuse or break general rules of accepted behavior. This will hinder your ability to communicate with users on those servers.
        • +
      +
      @@ -173,24 +175,25 @@ ios="https://itunes.apple.com/app/ring-a-gnu-package/id1306951055?mt=8" %} -
      +
      -

      Advantages

      -
        -
      • Minimal information is exposed to third parties.
        • -
      • Modern P2P platforms implement end-to-end encryption by default. There are no servers that could potentially intercept and decrypt your transmissions, unlike centralized and federated models.
        • -
      -
      -
      -

      Disadvantages

      -
        -
      • Reduced feature set:
        • +

        Advantages

          -
        • Messages can only be sent when both peers are online, however, your client may store messages locally to wait for the contact to return online.
          • -
        • Generally increases battery usage on mobile devices, because the client must stay connected to the distributed network to learn about who is online.
          • +
        • Minimal information is exposed to third parties.
          • +
        • Modern P2P platforms implement end-to-end encryption by default. There are no servers that could potentially intercept and decrypt your transmissions, unlike centralized and federated models.
        -
      • Your IP address and that of the contacts you're communicating with may be visible if you do not use the software in conjunction with a self contained network, such as Tor or I2P. Many countries have some form of mass surveillance and/or metadata retention.
        • -
      +
      +
      +

      Disadvantages

      +
        +
      • Reduced feature set:
        • +
          +
        • Messages can only be sent when both peers are online, however, your client may store messages locally to wait for the contact to return online.
          • +
        • Generally increases battery usage on mobile devices, because the client must stay connected to the distributed network to learn about who is online.
          • +
        +
      • Your IP address and that of the contacts you're communicating with may be visible if you do not use the software in conjunction with a self contained network, such as Tor or I2P. Many countries have some form of mass surveillance and/or metadata retention.
        • +
      +
      -- 2.47.2 From 1399d706157aa6269471d451da97b25969c9d13f Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sun, 19 Apr 2020 05:06:01 +0000 Subject: [PATCH 11/12] Use riot in Team chat page --- _includes/sections/teamchat.html | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/_includes/sections/teamchat.html b/_includes/sections/teamchat.html index 6c19fdd0..59be8f85 100644 --- a/_includes/sections/teamchat.html +++ b/_includes/sections/teamchat.html @@ -10,11 +10,11 @@ {% include cardv2.html - title="Matrix" - image="/assets/img/svg/3rd-party/matrix.svg" - image-dark="/assets/img/svg/3rd-party/matrix-dark.svg" - description='Matrix is an open-source project that publishes the Matrix open standard for secure, decentralized, real-time communication.
      - Riot.im is the popular reference client produced by the Matrix.org team. It offers optional E2EE for 1:1 and group conversations that must be turned on by the user. (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted). In the future it will be on by default.' + title="Riot" + image="/assets/img/svg/3rd-party/riotim.svg" + description='Riot.im is the reference client for the Matrix network. The Matrix open standard is an open-source standard for secure, decentralized, real-time communication.
      ' + labels="warning:Warning:Riot offers optional E2EE for 1:1 and group conversations that must be turned on by the user. + (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted)." website="https://about.riot.im/" forum="https://forum.privacytools.io/t/discussion-riot-im/665/" github="https://github.com/vector-im/riot-web/" -- 2.47.2 From b20cb664c57e35cd47a9b52970292238e9dd1726 Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Sun, 19 Apr 2020 05:36:23 +0000 Subject: [PATCH 12/12] Add VOIP badge for riot/rocketchat fix missing src --- _includes/sections/instant-messenger.html | 2 +- _includes/sections/teamchat.html | 4 ++-- pages/software/real-time-communication.html | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/_includes/sections/instant-messenger.html b/_includes/sections/instant-messenger.html index 7cd6afa1..e33e9438 100644 --- a/_includes/sections/instant-messenger.html +++ b/_includes/sections/instant-messenger.html @@ -94,7 +94,7 @@ image="/assets/img/svg/3rd-party/riotim.svg" description='Riot.im is the reference client for the Matrix network. The Matrix open standard is an open-source standard for secure, decentralized, real-time communication.
      ' labels="warning:Warning:Riot offers optional E2EE for 1:1 and group conversations that must be turned on by the user. - (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted)." + (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted).|success:VoIP" website="https://about.riot.im/" forum="https://forum.privacytools.io/t/discussion-riot-im/665/" github="https://github.com/vector-im/riot-web/" diff --git a/_includes/sections/teamchat.html b/_includes/sections/teamchat.html index 59be8f85..6df7e9d0 100644 --- a/_includes/sections/teamchat.html +++ b/_includes/sections/teamchat.html @@ -14,7 +14,7 @@ image="/assets/img/svg/3rd-party/riotim.svg" description='Riot.im is the reference client for the Matrix network. The Matrix open standard is an open-source standard for secure, decentralized, real-time communication.
      ' labels="warning:Warning:Riot offers optional E2EE for 1:1 and group conversations that must be turned on by the user. - (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted)." + (This can be done by clicking on the toggle switch which is accessed by clicking the room name or user name of the chat → Security & Privacy → Encrypted).|success:VoIP" website="https://about.riot.im/" forum="https://forum.privacytools.io/t/discussion-riot-im/665/" github="https://github.com/vector-im/riot-web/" @@ -32,7 +32,7 @@ title="Rocket.chat" image="/assets/img/svg/3rd-party/rocketchat.svg" description="Rocket.chat is an self-hostable open source platform for team communication. It has optional federation and experimental E2EE." - labels="warning:Experimental E2EE:Regarding E2EE their documentation states 'This feature is currently in alpha. It's also not yet supported on mobile'. There is no forward secrecy so compromised decryption password would leak all messages. Federation was also added afterwards, potentially causing room for mistakes." + labels="warning:Experimental E2EE:Regarding E2EE their documentation states 'This feature is currently in alpha. It's also not yet supported on mobile'. There is no forward secrecy so compromised decryption password would leak all messages. Federation was also added afterwards, potentially causing room for mistakes.|success:VoIP" website="https://rocket.chat/" forum="https://forum.privacytools.io/t/discussion-rocket-chat/1223" github="https://github.com/rocketchat/" diff --git a/pages/software/real-time-communication.html b/pages/software/real-time-communication.html index 76a0d6a9..e06237d7 100644 --- a/pages/software/real-time-communication.html +++ b/pages/software/real-time-communication.html @@ -21,7 +21,7 @@ description: "Discover secure and private ways to communicate with others online
      January 2020
      November 2019
      -- 2.47.2