Opened 3 months ago

Last modified 2 months ago

#27364 new project

update ricochet to use hsv3

Reported by: traumschule Owned by:
Priority: Low Milestone:
Component: Applications Version:
Severity: Normal Keywords: ricochet
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Is the Tor Project willing to adopt ricochet?

doc/TorifyHOWTO/InstantMessaging mentions/recommends ricochet. it uses v2 hs and would need to be restructured to support v3 hidden descriptors.

It is said to be stable and usable but receives no updates and ships an old tor version. Probably other changes are necessary as well, to fix possible security issues.

There is a ticket for it already and a WIP PR.

Child Tickets

Change History (7)

comment:1 in reply to:  description ; Changed 3 months ago by teor

Replying to traumschule:

Is the Tor Project willing to adopt ricochet?

What do you mean by "adopt"?

Ricochet has active developers.
As far as I'm aware, they do not want a closer association with the Tor Project.

Also, the Tor Project Applications team is focused on Tor Browser and Tor Browser for Android right now.

comment:2 Changed 3 months ago by traumschule

I don't think this is urgent and I don't want to push it on anybody of course.

Ricochet has active developers.

I see no actual activity on the 148 tickets, PRs do not get merged (maybe their quality is too low, but it is not in the comments). There was a statement in May that there are active developers but the last commit was a year ago. Only activity in branches is a port to go (see https://cwtch.im).

Development stalled in November 2016, though it has been relatively stable in the time since. is a good summary in my eyes.

But my impression could be wrong.

comment:3 in reply to:  1 Changed 3 months ago by teor

Ok, so the codebase is stalled, but there are people active on the bug tracker.

Disregarding project activity, here's my response:

Replying to teor:

Replying to traumschule:

Is the Tor Project willing to adopt ricochet?

What do you mean by "adopt"?

...
As far as I'm aware, they do not want a closer association with the Tor Project.

Also, the Tor Project Applications team is focused on Tor Browser and Tor Browser for Android right now.

I'm not sure there is anything we can do to help right now.

comment:4 Changed 3 months ago by traumschule

Keywords: ricochet added

Adoption was the wrong word because it implies official interaction. Promoting it with a link is probably a good start: #16576

Other ideas

comment:5 in reply to:  4 Changed 2 months ago by teor

Replying to traumschule:

Adoption was the wrong word because it implies official interaction. Promoting it with a link is probably a good start: #16576

We already link to Ricochet here:
https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/InstantMessaging

I added a security warning for the old tor version distributed with Ricochet:
https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/InstantMessaging?action=diff&version=41

Given the security issues, we probably shouldn't link to Ricochet without that warning.

Other ideas

I don't understand how rendezvous approval relates specifically to ricochet.

Tor Messenger has been discontinued.

I'm not sure I understand how this brainstorming session relates to this ticket.

comment:6 Changed 2 months ago by traumschule

I added a security warning for the old tor version distributed with Ricochet:
https://trac.torproject.org/projects/tor/wiki/doc/TorifyHOWTO/InstantMessaging?action=diff&version=41

great, used it in my PR for #16576.

The other links are as you said not relevant to the particular topic of this issue, just found them searching for ricochet.

Note: See TracTickets for help on using tickets.