Mercurial > libervia-backend

comparison doc/components.rst @ 4352:382dc6e62b6e

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
doc (components, encryption): add documentation on autocrypt for client and email gateway: fix 456
author Goffi <goffi@goffi.org>
date Fri, 28 Feb 2025 09:23:35 +0100
parents 35d41de5b2aa
children
comparison
equal deleted inserted replaced
4351:6a0a081485b8 4352:382dc6e62b6e
975 The gateway supports end-to-end encryption through the Gateway Relayed Encryption 975 The gateway supports end-to-end encryption through the Gateway Relayed Encryption
976 specification. This works by indicating to client how to format and encrypt the message 976 specification. This works by indicating to client how to format and encrypt the message
977 (in technical terms, it's by telling it to use MIME and OpenPGP) before sending it to the 977 (in technical terms, it's by telling it to use MIME and OpenPGP) before sending it to the
978 gateway. This only works with clients implementing this specification. 978 gateway. This only works with clients implementing this specification.
979 979
980 Autocrypt
981 ~~~~~~~~~
982
983 The gateway relays "Autocrypt" headers, which is a way to share public keys without
984 relaying them to a key server. In layman's terms, it's a way to exchange encryption data
985 to be able to encrypt messages automatically. However, while better than not using
986 end-to-end encryption, this method is not as secure as proper management of encryption
987 keys and authentication of the peer we're talking to.
988
989 Please refer to `Wikipedia's Autocrypt page`_ for more details, in particular on its
990 security model
991
980 992
981 .. note:: 993 .. note::
982 994
983 Gateway Relayed Encryption is not yet an official XEP, it will be evaluated by XMPP 995 Gateway Relayed Encryption is not yet an official XEP, it will be evaluated by XMPP
984 council to see if it gets an official number in coming weeks. 996 council to see if it gets an official number in coming weeks.
987 .. _XEP-0033 (Extended Stanza Addressing): https://xmpp.org/extensions/xep-0033.html 999 .. _XEP-0033 (Extended Stanza Addressing): https://xmpp.org/extensions/xep-0033.html
988 .. _XEP-0100 (Gateway Interaction): https://xmpp.org/extensions/xep-0100.html 1000 .. _XEP-0100 (Gateway Interaction): https://xmpp.org/extensions/xep-0100.html
989 .. _XEP-0106 (JID Escaping): https://xmpp.org/extensions/xep-0106.html 1001 .. _XEP-0106 (JID Escaping): https://xmpp.org/extensions/xep-0106.html
990 .. _XEP-0131 (Stanza Headers and Internet Metadata): https://xmpp.org/extensions/xep-0131.html 1002 .. _XEP-0131 (Stanza Headers and Internet Metadata): https://xmpp.org/extensions/xep-0131.html
991 .. _XEP-0498 (Pubsub File Sharing): https://xmpp.org/extensions/xep-0498.html 1003 .. _XEP-0498 (Pubsub File Sharing): https://xmpp.org/extensions/xep-0498.html
992 1004 .. _Wikipedia's Autocrypt page: https://en.wikipedia.org/wiki/Autocrypt
1005