Group chat

8 respostas [Última entrada]
Sachin
Desconectado
Joined: 06/02/2012

Imagine a groupbot verified by all the users in the group and when users
send message to the group, the message is signed by the groupbot's
public key.
then the groupbot does the job of encrypting the message with all user
public key and sending it to everyone.
but the matter here is, there should not be the need of a groupbot ond
the server software should have something implemented that functions
like the groupbot

I was wondering if there is a similar implementation of something like
this right now or perhaps a better one.

JadedCtrl
Desconectado
Joined: 08/11/2014

I assume you're talking about a conceptual IM service-- if so, why have the group-bot middle-man? The group-bot would make the chat centralized.
Have each member accept each other's keys, and the client send the message simultaneously to every user. Since every member has accepted the sending user's key, the same outcome is reached.

Sachin
Desconectado
Joined: 06/02/2012

That would be same as sending pgp signed email, what if there are 500 public keys to sign a message with
wouldn't that too much time and it won't be instant messaging anymore.

onpon4
Desconectado
Joined: 05/30/2012

Signing isn't the same as encryption. Don't confuse the two. You only need to sign a message once; it's encryption you have to repeat for everyone.

I don't think it's fair to assume that centralizing encryption makes it faster. The message still has to be encrypted just as many times; it's just a matter of where it's done. And we're talking about fraction-of-a-second delays here, so the lag caused by encrypting isn't likely to be terribly noticeable.

In any case, what you're asking for seems to be nothing more than using XMPP where everyone communicating with their XMPP server uses HTTPS, and the servers communicate with each other in an encrypted way as well. So just set up a private XMPP server for everyone involved to use and have everyone use HTTPS when they connect to it. (XMPP supports some kind of group chats, though I haven't actually used it.)

If you're looking for privacy, though, you may want to look at OTR:

https://en.wikipedia.org/wiki/Off-the-Record_Messaging

Mampir
Desconectado
Joined: 12/16/2009

> HTTPS

You probably mean TLS.

marioxcc
Desconectado
Joined: 08/13/2014

>“server software should have something implemented that functions like the groupbot”

It is already done that way: most (or at least a big proportion) IRC and XMPP servers accept TLS connections from clients. What benefit does your proposal offers over this?. What problem do you attempt to address with your proposal?.

If you do not know how the existing technology works, it makes no sense to think of how to improve it; instead learn how it works, and then you may have meaningful ideas on how to improve it. Anyway, it is likely that all of those ideas are obvious to the ones capable of implement them, and are widely known. Having ideas on how to improve software is the easy part. The hard part is to implement those ideas in software and that they become widespread.

Sachin
Desconectado
Joined: 06/02/2012

you are right i was hasty without thinking about the current available encryptions and simply forgot the tls connections

On 22 June 2015 23:47:19 GMT+05:30, name at domain wrote:
>>“server software should have something implemented that functions like
>the
>groupbot”
>
>It is already done that way: most (or at least a big proportion) IRC
>and XMPP
>servers accept TLS connections from clients. What benefit does your
>proposal
>offers over this?. What problem do you attempt to address with your
>proposal?.
>
>If you do not know how the existing technology works, it makes no sense
>to
>think of how to improve it; instead learn how it works, and then you
>may have
>meaningful ideas on how to improve it. Anyway, it is likely that all of
>those
>ideas are obvious to the ones capable of implement them, several times.
>
>Having ideas on how to improve software is the easy part. The hard part
>is to
>implement those ideas in software and that they become widespread.

SuperTramp83

I am a translator!

Desconectado
Joined: 10/31/2014

pidgin + OTR

andrew
Desconectado
Joined: 04/19/2012

I don't have a solution to your problem but maybe a program like Gribble
could be modified to do it:

https://wiki.bitcoin-otc.com/wiki/GPG_Identity_Checking
https://en.bitcoin.it/wiki/Gribble

Andrew