John Brooks

The hidden service connection is already decently encrypted, authenticated by public key (RSA 1024, with the public key authenticated by 80 bits of SHA1), and forward-secret at the connection level...

Relevant reading: https://github.com/WhisperSystems/TextSecure/wiki/ProtocolV2

Interesting reading: http://www.noiseprotocol.org/ Particularly some good points to think about in http://www.noiseprotocol.org/noise.html#payload-security-properties and http://www.noiseprotocol.org/noise.html#identity-hiding

> stickers / gifs seem to be standard in most messaging applications at this point which offers little insight on how useful or wanted they are :) This could happen...

It's absolutely possible to make versions of Ricochet for mobile. It's not my immediate priority, but here are some notes: In general, I'm skeptical of how well hidden services will...

There are other reports of this under Subgraph, particularly after the network goes down. Something in the tor control reconnection might not be throttling properly.

At the moment, this is a design that we wouldn't work well with. That is a shame, and it's worth thinking about. Torsion currently requires that it has a control...

Great! I wasn't aware of the Control Port Filter Proxy; that's a very useful solution. The current list of commands, excluding things relevant only to bundled Tor, is: - AUTHENTICATE...

A few small changes are necessary to allow running without a bundled instance. The UI doesn't handle that case yet, because this is the first situation [so far] where it...

@HulaHoopWhonix I'm hesitant to commit to supporting that right now. I outlined the reasons we use the control port in [this comment](https://github.com/ricochet-im/ricochet/issues/30#issuecomment-39647783). I want to avoid prematurely tying our hands...