converse.js icon indicating copy to clipboard operation
converse.js copied to clipboard

libsignal-protocol.js is deprecated (OMEMO)

Open mcDevnagh opened this issue 4 years ago • 3 comments

According to the setup guide libsignal-protocol.js is necessary for OMEMO. I understand that this still works and is probably secure, for now. However is there any plans to switch to the TypeScript client listed in the README linked below?

https://github.com/signalapp/libsignal-protocol-javascript/commit/4fbea5a8f8fa98d71cda2e0a25e222bd14cc07a5

mcDevnagh avatar Sep 14 '21 12:09 mcDevnagh

It's not clear to me whether that client requires Node only for building or also to run. If it's the latter, then it can't be used in the browser.

jcbrand avatar Sep 14 '21 12:09 jcbrand

it looks as though it needs to be run server-side, and it acts as a library for locally run Java, Typescript (node) or Swift code. That definitely goes against this project's goals:

It's 100% client-side JavaScript, HTML and CSS and the only backend required is a modern XMPP server.

However, an option to run and connect to a Node server just to do encryption may be something worth exploring. Perhaps this project could switch to a currently maintained encryption suite to use client side

mcDevnagh avatar Sep 14 '21 13:09 mcDevnagh

possibly https://www.npmjs.com/package/@wireapp/proteus could work

ghost avatar Sep 15 '21 04:09 ghost