|
From: <gai...@li...> - 2002-07-21 14:24:40
|
On #4, I agree in part. Except I believe the person who goes away should automatically turn off encryption. If you aren't in front of your computer, you shouldn't have encrypted messages open. The other person could always start another encrypted session, and those messages will queue on your side. But I wouldn't want a window open where messages can be read by anyone walking by. --- gai...@li... wrote: > W0d3n pretty much got a handle on the current > instability of the current > CVS, so I'm going to concentrate on my 2.0 feature > wishlist. I'll try and > stay out of the weeds. :-) > > 1. MAYBE add an option to the config so a user will > be asked which key to > use upon receiving a crypto request. > > 2. completely rewrite the handshake protocol. > however we do it, both parties > must enter their passwd or we cannot assume they are > who they say they are. > > 3. support for more than just RC5. and while we're > at it, use crypto code > that's not architecture dependant. I'm thinking we > should stick to block > ciphers. IMHO stream ciphers would be a hellish > pandora's box. > > 4. consider catching auto-replies (away messages) > and not letting them thru > while encrypted. it causes a known plaintext attack. > > 5. Queue enciphered messages while awaiting user > password entry. > > I'll repost if and when I think of more. > Peace > stu_monster > > > > _________________________________________________________________ > Send and receive Hotmail on your mobile device: > http://mobile.msn.com > > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf > _______________________________________________ > Gaim-e-developer mailing list > Gai...@li... > https://lists.sourceforge.net/lists/listinfo/gaim-e-developer __________________________________________________ Do You Yahoo!? Yahoo! Health - Feel better, live better http://health.yahoo.com |