Delivery-Date: Thu, 29 Oct 2015 17:12:31 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD,UNPARSEABLE_RELAY
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 4E05C1E0403;
	Thu, 29 Oct 2015 17:12:29 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 427F3382A5;
	Thu, 29 Oct 2015 21:12:12 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 927A938284;
 Thu, 29 Oct 2015 21:12:05 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id ihAkgoxeSjaz; Thu, 29 Oct 2015 21:12:05 +0000 (UTC)
Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 5B2BE3826A;
 Thu, 29 Oct 2015 21:12:05 +0000 (UTC)
Received: from piha.riseup.net (unknown [10.0.1.163])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
 by mx1.riseup.net (Postfix) with ESMTPS id 579D71A1F87;
 Thu, 29 Oct 2015 14:12:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1446153122; bh=z946vk5T3CKltwpQxx2iy5E/7/MKMv8l4K/TyMGYRbQ=;
 h=Date:From:To:Cc:Subject:From;
 b=L8ca7fiCSVfoKJt5yvWFJUWjgmjrq5Lm2pCYzrQTmtd8PAd006/ZNSaJLi+/73X0t
 of+Qni/v6DMZ4gd6fdTmQzqZs9jhVwlUsVb2zYZ2/81SugAiUPrRv+5bK7lTXXxISW
 ylQu0bFDxPgLuKstbTFl+ZKS20xT4n/26seX9y3Y=
Received: from [127.0.0.1] (localhost [127.0.0.1])
 (Authenticated sender: azadi) with ESMTPSA id E3BE61C1B54
Date: Thu, 29 Oct 2015 17:12:00 -0400
From: Sukhbir Singh <azadi@riseup.net>
To: tor-dev <tor-dev@lists.torproject.org>
Message-ID: <20151029211200.GA2253@riseup.net>
Mail-Followup-To: tor-dev <tor-dev@lists.torproject.org>,
 tor-talk <tor-talk@lists.torproject.org>
MIME-Version: 1.0
User-Agent: Mutt/1.5.24 (2015-08-30)
X-Virus-Scanned: clamav-milter 0.98.7 at mx1.riseup.net
X-Virus-Status: Clean
Cc: tor-talk <tor-talk@lists.torproject.org>
Subject: [tor-talk] Tor Messenger Beta: Chat over Tor, Easily
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============1257068662471845128=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>


--===============1257068662471845128==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="pf9I7BMVVzbSWLtt"
Content-Disposition: inline


--pf9I7BMVVzbSWLtt
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

Today we are releasing a new, beta version of Tor Messenger, based on
Instantbird [0], an instant messaging client developed in the Mozilla
community.

* What is it?

Tor Messenger is a cross-platform chat program that aims to be secure by
default and sends all of its traffic over Tor.  It supports a wide variety =
of
transport networks, including Jabber (XMPP), IRC, Google Talk, Facebook Cha=
t,
Twitter, Yahoo, and others; enables Off-the-Record (OTR) Messaging [1]
automatically; and has an easy-to-use graphical user interface localized in=
to
multiple languages.

* What it isn't...

Tor Messenger builds on the networks you are familiar with, so that you can
continue communicating in a way your contacts are willing and able to do. T=
his
has traditionally been in a client-server model, meaning that your metadata
(specifically the relationships between contacts) can be logged by the serv=
er.
However, your route to the server will be hidden because you are communicat=
ing
over Tor.

We are also excited about systems like Pond [2] and Ricochet [3], which try=
 to
solve this problem, and would encourage you to look at their designs and use
them too.

* Why Instantbird?

We considered a number of messaging clients: Pidgin, Adam Langley's
xmpp-client, and Instantbird. Instantbird was the pragmatic choice -- its
transport protocols are written in a memory-safe language (JavaScript); it =
has
a graphical user interface and already supports many natural languages; and
it's a XUL application, which means we can leverage both the code (Tor
Launcher) and in-house expertise that the Tor Project has developed working=
 on
Tor Browser with Firefox. It also has an active and vibrant software develo=
per
community that has been very responsive and understanding of our needs. The
main feature it lacked was OTR support, which we have implemented [4] and h=
ope
to upstream to the main Instantbird repository for the benefit of all
Instantbird (and Thunderbird) users.

* Current Status

Today we are releasing a beta version with which we hope to gain both
usability and security related feedback. There have been three previous alp=
ha
releases to the mailing lists that have already helped smooth out some of t=
he
rougher edges.

* Downloads

Linux (32-bit)
    https://dist.torproject.org/tormessenger/0.1.0b2/tor-messenger-linux32-=
0.1.0b2_en-US.tar.xz
   =20
Linux (64-bit)
    https://dist.torproject.org/tormessenger/0.1.0b2/tor-messenger-linux64-=
0.1.0b2_en-US.tar.xz

Windows
    https://dist.torproject.org/tormessenger/0.1.0b2/tormessenger-install-0=
=2E1.0b2_en-US.exe

OS X
    https://dist.torproject.org/tormessenger/0.1.0b2/TorMessenger-0.1.0b2-o=
sx64_en-US.dmg

sha256sums
    https://dist.torproject.org/tormessenger/0.1.0b2/sha256sums.txt
    https://dist.torproject.org/tormessenger/0.1.0b2/sha256sums.txt.asc

The sha256sums.txt file containing hashes of the bundles is signed with the
key 0x6887935AB297B391 (fingerprint: 3A0B 3D84 3708 9613 6B84  5E82 6887 93=
5A
B297 B391).

* Instructions

- On Linux, extract the bundle(s) and then run: ./start-tor-messenger.deskt=
op
- On OS X, copy the Tor Messenger application from the disk image to your
  local disk before running it.

On all platforms, Tor Messenger sets the profile folder for
Firefox/Instantbird to the installation directory.

- Note that as a policy, unencrypted one-to-one conversations are not allow=
ed
  and your messages will not be transmitted if the person you are talking w=
ith
  does not have an OTR-enabled client. You can disable this option in the
  preferences to allow unencrypted communication but doing so is not
  recommended.

* Source Code

We are doing automated builds [5] of Tor Messenger for all platforms.

The Linux builds are reproducible: anyone who builds Tor Messenger for Linux
should have byte-for-byte identical binaries compared with other builds fro=
m a
given source. You can build it yourself [6] and let us know if you encounter
any problems or cannot match our build. The Windows and OS X builds are not
completely reproducible yet but we are working on it [7].

* What's to Come

Our current focus is security, robustness and user experience. We will be
fixing bugs and releasing updates as appropriate, and in the future, we plan
on pairing releases with Mozilla's Extended Support Release (ESR) cycle. We
have some ideas on where to take Tor Messenger but we would like to hear wh=
at
you have to say. Some possibilities include:

- Reproducible builds for Windows and OS X (#10942)
- Sandboxing (#10943)
- Automatic updates (#14388)
- Improved Tor support (#10950)
- OTR over Twitter DMs (#13312)
- Produce (and distribute) internationalized builds (#10945)
- Secure multi-party communication (np1sec) [8]
- Encrypted file-transfers
- Usability study

* How To Help

Give it a try and provide feedback, requests, and file bugs [9] (choose the
"Tor Messenger" component). If you are a developer, help us close all our
tickets [10] or help us review our design doc [11]. As always, we are idling
on IRC in #tor-dev (OFTC) (nicks: arlolra; boklm; sukhe) and subscribed to =
the
tor-talk/dev mailing lists.

Please note that this release is for users who would like to help us with
testing the product but at the same time who also understand the risks
involved in using beta software.

Thanks and we hope you enjoy Tor Messenger!

[0] - http://instantbird.com
[1] - https://otr.cypherpunks.ca
[2] - https://pond.imperialviolet.org
[3] - https://ricochet.im
[4] - https://github.com/arlolra/ctypes-otr
[5] - https://gitweb.torproject.org/tor-messenger-build.git
[6] - https://gitweb.torproject.org/tor-messenger-build.git/tree/README
[7] - https://trac.torproject.org/projects/tor/ticket/10942
[8] - https://github.com/equalitie/np1sec
[9] - https://trac.torproject.org/projects/tor/newticket
[10] - https://trac.torproject.org/projects/tor/query?status=3D!closed&comp=
onent=3DTor+Messenger
[11] - https://trac.torproject.org/projects/tor/wiki/doc/TorMessenger/Desig=
nDoc

--pf9I7BMVVzbSWLtt
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=sYP4
-----END PGP SIGNATURE-----

--pf9I7BMVVzbSWLtt--

--===============1257068662471845128==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============1257068662471845128==--

