Jeff Burdges

Why an allocator?

1

I noticed that [libsodium's memory managment](http://doc.libsodium.org/helpers/memory_management.html) encurages using allocators too, although they also offer the `mlock`, `munlock`, and `memzero` seperately too. Is an allocator used here only because constructors are...

Branches created by LLVM

1

It's worth mentioning https://github.com/klutzy/nadeko here. See https://moderncrypto.org/mail-archive/curves/2015/000463.html and https://moderncrypto.org/mail-archive/curves/2015/000466.html

Infer fields using relative lifetimes

1

We maybe have independent reasons for doing fields-in-traits, but they appear unnecessary for typical "partial borrowing" use cases. We de facto loose lifetime elision with any partial borrowing scheme because...

Concerns about usability and retaining old messages

7

We should discuss how retaining and archiving old messages works. At 31c3, Dan Bernstein (djb) suggested that Pond should : - Allow more variations on retained status (2 days after...

Send messages to multiple recipients, optionally introducing some of them to all the others

10

This pull supersedes https://github.com/agl/pond/pull/144 incorporating suggestions by @agl Check https://github.com/agl/pond/pull/144 for further earlier comments on the development. Messages can be sent to multiple recipients. By default, recipients are not told...

Use go generate to rebuild .proto files

1

We replace the shell scripts added in https://github.com/agl/pond/pull/161 to run protoc with go generate directives. I'd recommend that @agl rerun go generate himself rather than simply accepting e79daf2 of course....

Delete without revoke

1

There are several of situation where one might wish to delete a contact without revoking them, such as halting failed PANDA key exchanges. I could add this feature rather easily...

Generate shared secrets using diceware

2

Diceware passwords are easier to remember and communicate. See https://github.com/holizz/diceware/ or https://firstlook.org/theintercept/2015/03/26/passphrases-can-memorize-attackers-cant-guess/ We could improve the entropy per character by removing numbers and symbols from the wordlist, and adding them...

Fingerprint of public keys

1

We compute and display a fingerprint in User and Contact information dialogs for both the GUI and CLI. Fingerprints are meant to be safe to display publicly on sites like...

Add the line `fmt.Printf("%x\n",contact.theirIdentityPublic[:])` anywhere around https://github.com/agl/pond/blob/master/client/client.go#L1041 in `newRatchet(..)`. Next run `go test`. It'll print `0000000000000000000000000000000000000000000000000000000000000000` repeatedly, so the ratchet never sees a non-zero value for `contact.theirIdentityPublic`. This is because...