Hacker News new | ask | show | jobs
by ahalam 3698 days ago
You will find https:///www.wire.com/ interesting. e2e encrypted, clients for Windows, Mac, Android & iOS. And chats are synched between all your clients. Also .. no phone number required to sign up; use your email.
3 comments

It's closed source, has no linux client and it's not end-to-end encrypted. https://mobile.twitter.com/thegrugq/status/54017648967774617...

Also have a look at https://wire.com/legal/#privacy

All crypto is open sourced.

https://app.wire.com offers full functionality on Linux.

That tweet you link to is over a year old. Wire is E2EE since March 2016. https://wire.com/privacy has security and privacy whitepapers.

PS. I work at Wire.

Missing Linux native, but that might be too much to ask. Thanks for the link. I'll give it a try.

Do you know if it's open source or at least gone through an audit?

The crypto modules are indeed open source. https://github.com/wireapp

I don't know whether they have been formally audited.

That would be the source of some crypto code, not necessarily the code the app itself uses. Since the app is closed, there's no way to verify.
How is client sync possible with e2e?
Why wouldn't it be possible? The app knows who is sending to who and which devices are linked.
Because if it's end to end encrypted each device would either need the same private key to decode the messages or each message is encrypted with each devices public key.

This would require some kind of key exchange i.e. scanning bar codes.

There are probably a million ways to deal with it.

I haven't looked into it at all, but one way I just thought of right now is to have your own devices p2p the message among themselves with original sender's information after the one used most recently receives it.

I've noticed that a new device added to the account will not see the history. It only sees those messages that are received or sent after it has been added to the account.
There's no technical reason that the synced devices couldn't distribute the missing messages amongst themselves. :)
Signal also syncs its e2e encrypted chats
Client-to-client, simple as that. Pushed in encrypted form like regular messages.
It's possible because chats are not end-to-end encrypted.