[liberationtech] What I've learned from Cryptocat

[Jacob Appelbaum]

Jillian C. York:
> It's difficult.  I'm not a technologist, but I understand the issues and
> the user needs well.  My "type," I'd surmise, is few and far between.
> 
> Security experts have obvious reasons for being conservative, and I get
> that.  Nevertheless, there are a lot of users who would benefit from *a
> little bit* of added security.  The question, then, as I see it, is:
> 
> *How do we provide that little bit while still making users aware of risks?*

The problem is that the little bit is effectively zero.

What's the difference between Facebook chat over SSL and Cryptocat over SSL?

Without a browser extension/plugin - there is little to no difference.

You have to trust the server and the server operator to not be a bad
actor in both cases.

All the best,
Jake