Always Secure Messaging

From Guardian Project Wiki

Revision as of 19:41, 12 July 2012

Always Secure Messaging ("AweSoMe") is a collaborative effort to build interoperable, open-source, secure messaging applications, that work from mobile to mobile, as well as mobile to web. In particular, the goal is to create an extremely usable and high quality experience, that simultaneously supports one-to-one and one-to-many (group) end-to-end secure messaging communications.

The basic principles below guide our efforts:

1. We believe in Security by Default, Privacy by Design
2. We believe in protocols, not products.
3. We believe in partnerships, not proprietary fiefdoms.
4. We believe in building a community of collaborators, not a cacophony of criticism and unnecessary competition.
5. We believe in practical solutions to perilous problems.

Founding Members & Apps

• ChatSecure for iOS https://chatsecure.org/
• Crypto.cat (Web) https://crypto.cat
• Guardian Project: Gibberbot for Android https://guardianproject.info/apps/gibber

Project Links

• Secure Mobile Design Wiki https://guardianproject.mybalsamiq.com/projects/securemobilemessaging/grid
• Mobile Partnership Announcement https://guardianproject.info/2012/06/08/a-partnership-for-open-secure-mobile-messaging-between-ios-and-android/

Existing Standards

• XMPP http://xmpp.org/
• XEP-0035: SSL/TLS Integration http://xmpp.org/extensions/xep-0035.html
• Off-the-Record Messaging: http://www.cypherpunks.ca/otr/
• XEP-0198: Stream Management http://xmpp.org/extensions/xep-0198.html
• XEP-0184: Message Delivery Receipts http://xmpp.org/extensions/xep-0184.html
• MultiParty OTR (mpOTR) https://github.com/kaepora/cryptocat/wiki/mpOTR-Specification

User Expectations

• Message queuing and delivery when out of coverage, or in spotty coverage
• Always on / Start on boot
• Ability to manage buddies, contacts, groups, identities
• Group Messaging