handmade.social

Kevin Karhan :verified:<a href="https://infosec.exchange/@xoron" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@xoron</a> I don't want to discourage you at all - in fact I think your goal is not just noble but also worth aspiring to.<ul><li>My recommendation is always to scout out existing solutions, protocols and standards and see if those can be salvaged / used and if not, reason why. <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a>/MIME may seem crusty but a good UI can make it easy. Same.goes for <a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OMEMO</a> & <a href="https://infosec.space/tags/OTR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OTR</a>... </li></ul>But whatever you do, please "DO NOT DIY ENCRYPTION!" <ul><li>Instead delegate it to drop-in libraries (i.e. crypto++ for C++) that are well, maintained and getting audited.</li></ul>Prioritize features early on and make a decision what you want and if/how these can be accomplished. If necessary, have different modes / functions one has to context-switch (i.e. videocalling can't work in an airgapped network unless your callers are in the same (W)LAN).<ul><li>If possible choose to stay platform-independent in terms of tech, so like <a href="https://infosec.space/tags/WebCall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebCall</a>, <a href="https://infosec.space/tags/JitsiMeet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JitsiMeet</a>, etc. you can simply package that up with <a href="https://nwjs.io" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nwjs.io</a>... (Except if you need like a minimalist, (n)curses-style TUI tool like <a href="https://infosec.space/tags/enc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enc</a>)</li></ul>User-test early on. Espechally with "<a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechIlliterates</a>", if you can.<ul><li>Focus on a <a href="https://infosec.space/tags/MVP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MVP</a> (minimum viable product) early on. </li></ul>Write <a href="https://infosec.space/tags/documentation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#documentation</a> early on since that'll remove headaches. And I don't just mean <a href="https://infosec.space/tags/CommentYourCode" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CommentYourCode</a> but go deep and explain in detail why you chose something. This will help not just you.<ul><li>In terms of "scouting existing solutions" I'd recommend to take a look not just at <a href="https://infosec.space/tags/JitsiMeet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#JitsiMeet</a> & <a href="https://infosec.space/tags/WebCall" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebCall</a>, but also <a href="https://infosec.space/tags/Briar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Briar</a>, <a href="https://infosec.space/tags/ServalMesh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ServalMesh</a>, <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@monocles</a> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#monoclesChat</a>, <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@gajim</a> / <a href="https://infosec.space/tags/gajim" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gajim</a> and <a href="https://infosec.exchange/@micahflee" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@micahflee</a>'s <a href="https://infosec.space/tags/OnionShare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OnionShare</a>. </li></ul>Make yourself a list what you like and dislike from those. <ul><li>Same with <a href="https://infosec.space/tags/Linphone" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linphone</a>, <a href="https://fosstodon.org/@zulip" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@zulip</a> / <a href="https://infosec.space/tags/Zulip" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Zulip</a>, <a href="https://infosec.space/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WhatsApp</a>, <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Signal</a>, <a href="https://infosec.space/tags/Threema" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Threema</a> and even <a href="https://infosec.space/tags/WeChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WeChat</a>, <a href="https://infosec.space/tags/FacebookMessenger" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FacebookMessenger</a>, <a href="https://infosec.space/tags/iMessage" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iMessage</a>, <a href="https://infosec.space/tags/FaceTime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FaceTime</a> and god forbid <a href="https://infosec.space/tags/Skype" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Skype</a>, <a href="https://infosec.space/tags/MicrosoftTeams" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MicrosoftTeams</a> as well as <a href="https://infosec.space/tags/Slack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Slack</a>.</li></ul>Don't be afraid if your <a href="https://infosec.space/tags/App" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#App</a> can't tick all the boxes at first release. Rather feel free to slowly ibtegrate them. Needless to say I do sincerely wish you good luck and only the best in terms of success.

Kevin Karhan :verified:<a href="https://infosec.exchange/@xoron" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@xoron</a> I mean, that's close to <a href="https://infosec.space/tags/ServalMesh" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ServalMesh</a>, tho Id say if you were willinc to compromise then <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#XMPP</a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OMEMO</a> as in <a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@gajim</a> / <a href="https://infosec.space/tags/Gajim" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gajim</a> & <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@monocles</a> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#monoclesChat</a> gets most of it.<ul><li>Personally, I did habe a similar idea, abeit more bare-bones, with <a href="https://github.com/KBtechnologies/PocketCrypto" rel="nofollow noopener noreferrer" target="_blank">the</a> <a href="https://infosec.space/tags/PocketCrypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PocketCrypto</a>.</li></ul>For file transfers, I did <a href="https://github.com/KBtechnologies/ATP" rel="nofollow noopener noreferrer" target="_blank">envision</a> <a href="https://infosec.space/tags/ATP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ATP</a> aka. <a href="https://infosec.space/tags/AirrgappedTransferProtocol" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AirrgappedTransferProtocol</a>.<ul><li>Both are <a href="https://infosec.space/tags/NetworkAgnostic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkAgnostic</a>, <a href="https://infosec.space/tags/Decentralized" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Decentralized</a> and full <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfCustody</a> with real <a href="https://infosec.space/tags/E2EE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#E2EE</a> using <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PGP</a> (or <a href="https://github.com/life4/enc" rel="nofollow noopener noreferrer" target="_blank">rather</a> <a href="https://infosec.space/tags/enc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enc</a>)!</li></ul>

Recent searches

Search options

Administered by:

Server stats:

#servalmesh