[whispersystems] bleep

[Петар Поп Арсов (via whispersystems Mailing List)]

I saw an application that uses end-to-end encryption but is P2P ( No server used, no metadata?), could this be the future of Secure messaging? From my point of view, if encryption is good implemented it cuts every security danger except end point... Maybe Signal can adapt to this...

It's called Bleep

[Abraham Goldoor]

Hi, I am one of the developers that conceived and built Bleep. I can
confirm that it had some nifty features and ran fully P2P if operated in
that mode. But due to the usual politics of product development, the
promise of it being ONLY P2P and primarily security/privacy focused got
watered down considerably. “Helper” servers were added along the way to
make it easier to use — the user wasn't forced to use them, but by default
they would unless they opted out.

Mainly I replied to your message just to mention that Bleep is abandonware
at this point. BitTorrent had a doubling-down on a pure media strategy
earlier this year, and so all non-media projects were either adapted or put
on hold. Hence BitTorrent Sync becoming Resilio, and Bleep development
ending.

However, a couple members of the team released as open source the first
chunk of the Bleep engine under the name “Scout”. (There’s been talk of
more to follow, but I’m not sure where part two is.)
Here’s a blog post and link to the repo that describe what is included in
Scout:
http://blog.bittorrent.com/2016/09/09/scout-securely-locate-peers-without-central-servers/

https://github.com/bittorrent/scout

Essentially Scout is intended to provide an easy-to-use module of just the
P2P portion of Bleep’s chat engine. It allows you to easily use the
BitTorrent DHT to support chat features (generating public keys, securely
storing your contact info, finding your contacts and retrieving their info,
storing/retrieving offline (asynchronous) messages, etc.)
There’s a couple of other neat things Bleep had that Scout doesn’t include,
but maybe they’ll come out in Scout v2.

Anyway, I usually just lurk on this list, but the subject line caught my
eye. It’s incredibly cool how effective Moxie and co. have been in getting
end-to-end encryption into the hands of laypeople, which checks the biggest
box on my list of what I hoped Bleep might do. Someone finally did it, and
from outside of one of the major giants no less!
--
Abraham Goldoor

On September 26, 2016 at 3:59:48 PM, Петар ППп АрсПв (
***@lists.riseup.net) wrote:


I saw an application that uses end-to-end encryption but is P2P ( No server
used, no metadata?), could this be the future of Secure messaging? From my
point of view, if encryption is good implemented it cuts every security
danger except end point... Maybe Signal can adapt to this...

It's called Bleep

[z***@manian.org]

Thanks for the information Abraham.

I don't believe any information was ever published on Bleep's crytographic
protocol.

Do you have any opinions or experiences about the notion of storing prekeys
in a DHT? This idea often comes up when discussing the possibility of a
distributed version of Signal.

Post by Abraham Goldoor
Hi, I am one of the developers that conceived and built Bleep. I can
confirm that it had some nifty features and ran fully P2P if operated in
that mode. But due to the usual politics of product development, the
promise of it being ONLY P2P and primarily security/privacy focused got
watered down considerably. “Helper” servers were added along the way to
make it easier to use — the user wasn't forced to use them, but by default
they would unless they opted out.
Mainly I replied to your message just to mention that Bleep is abandonware
at this point. BitTorrent had a doubling-down on a pure media strategy
earlier this year, and so all non-media projects were either adapted or put
on hold. Hence BitTorrent Sync becoming Resilio, and Bleep development
ending.
However, a couple members of the team released as open source the first
chunk of the Bleep engine under the name “Scout”. (There’s been talk of
more to follow, but I’m not sure where part two is.)
Here’s a blog post and link to the repo that describe what is included in
http://blog.bittorrent.com/2016/09/09/scout-securely-locate-peers-without-central-servers/
https://github.com/bittorrent/scout
Essentially Scout is intended to provide an easy-to-use module of just the
P2P portion of Bleep’s chat engine. It allows you to easily use the
BitTorrent DHT to support chat features (generating public keys, securely
storing your contact info, finding your contacts and retrieving their info,
storing/retrieving offline (asynchronous) messages, etc.)
There’s a couple of other neat things Bleep had that Scout doesn’t
include, but maybe they’ll come out in Scout v2.
Anyway, I usually just lurk on this list, but the subject line caught my
eye. It’s incredibly cool how effective Moxie and co. have been in getting
end-to-end encryption into the hands of laypeople, which checks the biggest
box on my list of what I hoped Bleep might do. Someone finally did it, and
from outside of one of the major giants no less!
--
Abraham Goldoor
On September 26, 2016 at 3:59:48 PM, Петар ППп АрсПв (
I saw an application that uses end-to-end encryption but is P2P ( No
server used, no metadata?), could this be the future of Secure messaging?
From my point of view, if encryption is good implemented it cuts every
security danger except end point... Maybe Signal can adapt to this...
It's called Bleep