Re: Threema using XMPP

On 24 jul. 2014, at 17:32, Ashley Ward <[email protected]> wrote:

> On 24 Jul 2014, at 16:22, Simon Tennant <[email protected]> wrote:
> 
>> Agree on 5222. But it smells like XMPP according to https://www.os3.nl/_media/2013-2014/courses/ssn/projects/threema_report.pdf
> 
> They seem pretty sure about it:
> 
> "The communication protocol used for this communication is Extensible
> Messaging and Presence Protocol (XMPP). XMPP implements Simple
> Authentication and Security Layer (SASL) and Transport Layer Security
> (TLS) for its security. This means that MitM attack might be feasible for
> this communication”

I highly doubt they have actually verified that and not just based it on the
port number. This [1] paper describes the packet formats, and it describes it
as “[...] a custom protocol with some similarities to CurveCP”.

Thijs

_______________________________________________
JDev mailing list
Info: http://mail.jabber.org/mailman/listinfo/jdev
Unsubscribe: [email protected]
_______________________________________________

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=zDh6
-----END PGP SIGNATURE-----