[lisper]

The SpiderOak folks seem to know what they're doing. But if you don't trust them, here's a completely open secure communications tool:

https://github.com/Spark-Innovations/SC4

It's based on TweetNaCl, libsodium's smaller sibling. It can run standalone, i.e. no server required.

No group chat yet, but that's a relatively straightforward extension. I have two-party chat working in private beta. (Chat does require a server, though.)

[CiPHPerCoder]

> The SpiderOak folks seem to know what they're doing.

I'm inclined to agree with that assessment.

> But if you don't trust them

Trust, but verify.

IIRC they were discussing hiring a friend of mine (whose knowledge in software security is something I respect greatly).