[liberationtech] Ostel: encrypted phone calls

[Nathan of Guardian]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/20/2014 11:43 AM, KheOps wrote:
> I've tried a bit more Ostel.co, from a Linux machine. It seems to
> work pretty well, even though I should test it more thoroughly.

Glad to hear.

> I would like to suggest adding 'linphone' to the list of software
> that works for Linux on that page: https://ostel.co/about. I just
> tried it, it has support for ZRTP and is much lighter on the CPU
> and RAM than Jitsi.

We agree Linphone is a nice open-source solution, as well, and it does
include ZRTP on Linux and Android releases.

With the Android version, you need to manually turn on ZRTP and TLS in
the settings, so it isn't quite as "secure by default" as using the
OSTN or OStel wizard in CSipSimple.

However, the Android version has excellent video support, that works
through ZRTP encryption as well (though it is using a variable bit
rate codec, which can reduce the effectiveness of the encryption).

The iOS version unfortunately does not include ZRTP by default yet.

> 
> I cannot tell whether there has been any security review of
> linphone, though.

Nothing by us yet, though I am hopeful it can happen sometime this year.

+n



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=RXN+
-----END PGP SIGNATURE-----