LibreSignal
▻https://fdroid.eutopia.cz
Why have Signal, TextSecure and RedPhone been renamed?
Moxie Marlinspike apparently doesn’t like the idea of independent builds of TextSecure and RedPhone so much, that he started with legal threats on Twitter. Independent builds of TextSecure have been therefore renamed to TextLibre and RedPhone to PhoneLibre.
Latest TextSecure for Android has been merged with RedPhone and is now Signal. Independent builds of Signal have been renamed to LibreSignal.
Application IDs are still the same, so you will not lose data after upgrade.
Motivation
My primary motivation for creating this repository has been the absence of TextSecure private messenger from the official F-Droid repository. TextSecure has already been included in F-Droid for a brief time in the past, but Moxie Marlinspike (author of TextSecure) didn’t like this and demanded it to be removed. TextSecure is Free Software (licensed under GPL), so F-Droid maintainers didn’t have to remove it, but nevertheless they did.
There has been big discussion about it (issue #127), but simply told, Moxie is not open to arguments and wants TextSecure to be distributed only via Google Play. He already locked this discussion. This is unacceptable for me, because applications installed from Google Play can be silently updated without user knowing about it, e.g. to version with hidden backdoor.
TextSecure still needs Google Play Services (because it uses Google Cloud Messaging), but you don’t need Google Account and Google Play cannot silently update app that has been installed outside of Google Play store. Hopefully in the future, it will be possible to use official TextSecure client without Google Play Services (see issue #1000 - Websocket support, unfortunately Moxie also locked this discussion).
For now there is unofficial TextSecure fork by JavaJens, which already uses WebSocket instead of GCM and therefore doesn’t need Google Play Services. You can install it from my experimental F-Droid repository.
Signal (aka TextSecure), développé par Open Whisper System, est une application centralisée de messagerie instantanée très similaire à Whatsapp dans son fonctionnement. Mais l’application et le serveur sont libres et open-source. De plus, les clients intègrent by design un chiffrement de bout en bout. Ce qui en fait l’application de messagerie instantanée la plus aboutie, facile d’utilisation par n’importe qui et avec à priori un bon niveau de confidentialité.
Cependant l’application officielle de Signal pour Android dépend du service de notification Google Cloud Messaging. Ce service nécessite l’installation de la bibliothèque Google Play Service sur son mobile, qui elle n’est pas open-source.
LibreSignal est un fork de Signal débarrassé de la dépendance à Google Cloud Messaging. Il repose sur les websockets (implémentés par le serveur officiel). Il permet ainsi de communiquer avec l’ensemble des utilisateur de Signal, même ceux ayant (pas) choisi l’installation du mouchard Google ou ceux utilisant iOS.
Pour l’utilisation de SMS chiffrés de bout en bout en rappellera l’existence pour Android de SMSSecure :
▻https://smssecure.org
▻https://f-droid.org/repository/browse/?fdid=org.smssecure.smssecure
▻https://github.com/SMSSecure/SMSSecure
#Android #Cryptographie #F-Droid #Fork_(développement_logiciel) #Google_Cloud_Messaging #Messagerie_instantanée #Off-the-Record_Messaging #Principe_de_bout-à-bout #Signal #TextSecure