Re: [tor-talk] Cables Secure Anonymous Communications

[AntiTree <antitree@xxxxxxxxx>]

That's cool. Thanks for replying. Yeah I saw the randomize retries which is
nice. The crypto appears to check out (maybe with a few points of
improvements).

My initial reaction is that crypto is at least following some kind of
standards, but transmission of those CMS messages via GET requests to a
custom HTTP service running on each box. Also, although it is pretty
obscured from accidental discovery thanks to Tor, this service spits out
identifying information. Lastly, there seems like a likely scenario that a
third party could at least verify that a message was exchange between two
accounts. Is this a misunderstanding on my part?

@


On Tue, Nov 19, 2013 at 4:24 AM, Jeremy French <pgp@xxxxxxxxxxxxxxxxxx>wrote:

> Yes I have looked into it. It can be a bit tricky to set up. But seems to
> work well enough once it is set up.
>
> P2P email over TOR is actually quite a neat solution, as you do away with
> any central weak spot. Cables also randomizes the times that it retries to
> send to try and cut down on leaks due to timing information.
>
> I have a how to on setting up on Arch Linux here
> http://msntfh.tumblr.com/post/66871943930/setting-up-cables-on-arch
>
> Jeremy
>
>
> On Sat, Nov 16, 2013 at 11:22:21PM -0500, AntiTree wrote:
> > I'm a bit late to the party, but I was taking a look at the Cables
> project
> > form the Liberte Linux distro. Here is the project page:
> > https://github.com/mkdesu/cables
> >
> > The short explanation is that it attempt to implement a PKCS#7 AKA CMS. [
> > http://en.wikipedia.org/wiki/Cryptographic_Message_Syntax]
> >
> > This is an interesting project that attempts to leverage Tor hidden
> > services to share communications and X.509 certificates to verify
> identity.
> >
> > I'm wondering if anyone has looked into this on the list.
> >
> > More info: http://dee.su/cables
> >
> > AntiTree
> > --
> > tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
> > To unsubscribe or change other settings go to
> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
> --
> tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk