Difference between revisions of "Stanza encryption"

Jump to navigation Jump to search
18 bytes removed ,  07:52, 1 April 2019
 
(7 intermediate revisions by 2 users not shown)
Line 15: Line 15:
Most importantly though we need experience in this field in order to get a better understanding of what pitfalls exist, so lets JUST DO IT!
Most importantly though we need experience in this field in order to get a better understanding of what pitfalls exist, so lets JUST DO IT!


== Requirements ==
== Use Cases ==


* IQ Stuff between two (online) devices. It would be nice to be able to establish some sort of longer standing session in that case
* Clients exchange messages that contain sensitive information with (multiple) other clients.
* Multi device message stuff.
* Clients might want to encrypt IQs between two (online) devices. Since there may be more than one consecutive IQ being exchanged within the same context, it might be worth to think about possibilities to establish some sort of longer standing session to reduce encryption overhead. This may be out of the scope of this document though.


== Related Work ==
== Related Work ==
Line 43: Line 43:
* [https://op-co.de/tmp/SEX.html Simple Encryption for XMPP]
* [https://op-co.de/tmp/SEX.html Simple Encryption for XMPP]


== Proposal ==
== Proposal / Work in Progress ==


=== Elements ===
The proposal is actively worked on [https://github.com/vanitasvitae/flowdalic-xeps/tree/sce here]. See /xep-sce/ for the document ([http://geekplace.eu/xeps/xep-sce/xep-sce.html rendered html]).


* Envelope Element:
Please feel free to comment, give feedback and request changes!
This element is used to 'bundle' together the parts of the message that need to be protected.
 
<envelope xmlns='...' encns='urn:xmpp:openpgp:0'>
  <crypt-specifix>
 
</envelope>
 
* CryptoSpecific Elements:
  * timestamp, padding etc.
 
== Whitelisting / Blacklisting ==
 
Its up to the implementation what to put into the envelope.
An implementation should put all the stuff that the server usually ignores in the envelope.
 
Whitelist for decryption
Use Registry for this
 
Things to think about:
Delay Tags vs. timestamps
121

edits

Navigation menu