-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Mon, 23 Mar 2020 16:58:58 +0100
"Dr. Nikolaus Klepp" <dr.klepp@???> wrote:

> Anno domini 2020 Mon, 23 Mar 15:14:15 +0100
> Florian Zieboll scripsit:
>
> > May I ask for your tangible opinion
> > on / experience with qtox resp. the tox protocol in general?
>
> Hi Florian!
>
> No irony intended :) I use tox myself for basicly anything that
> otherwise would be done face2face. The thing I especially like is
> that you do not have to create an account on a centralized server.
> Just create an ID, send it do somebody, accept his/her invitation and
> that's it. I've made a small script that fires up qTox when I plug in
> my usb headset :)
>
> @protocol: well, it works. Is it secure? Kind of, did no analysis of
> it. Compared to mumble (which I had running 3 years ago) it's fine
> with low bandwidth (chat and audio, video is another thing), I can
> publish a screen or a defined region as video source (which is great
> for teaching), and there are no offline messages (email is for
> offline).
>
> Nik


Hallo Nik,

thank you very much for your feedback! I just had started testing it
(with qtox for Linux and trifa for Android) but felt somewhat unsure if
I'd want to "spread the word" due to the quite negative connotation of
the German Wikipedia article [1], and an LWN.net article [2] about some
trouble within the core developing team.

I like the "serverless" p2p concept very much and was impressed how
well it performs - and also of qtox's "feature completeness". As tox
uses common crypto libs (libnacl / libsodium), I hope that the
mentioned security issues have been mitigated - and even if not, I am
confident that a wider use of it will move it more into focus of
possible security auditors.

Best regards and libre Grüße,
Florian


[1] https://de.wikipedia.org/wiki/Tox_(Protokoll)
[2] https://lwn.net/Articles/651003/
-----BEGIN PGP SIGNATURE-----
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=xebA
-----END PGP SIGNATURE-----