Drafting a method for verifying new devices for #XMPP end to end encrypted chats.
-
Drafting a method for verifying new devices for #XMPP end to end encrypted chats.
This is a very early draft/brain dump, once a few people validates, it can be submitted to official review process.
#Matrix already implements cross signing and this makes encryption experience very smooth, but in XMPP using multiple devices in encrypted rooms is really a mess.
XMPP already have a concept of master key per identity defined in OpenPGP for XMPP. We can combine these two.
-
This is one of the high priority issues identified by @prav community and we hope to focus on this once we finish https://prav.app/donate/custom-username/
Once the XEP gets validated by XMPP community, we plan to run another crowd funding campaign to implement this (we submitted a proposal to NLNet for this, but was not accepted).
