[gnet] End-to-end encryption

[Synx <gnet synx us to>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've been trying to make an app that has end-to-end encryption. My hope
is to make something that leads people through the process of
establishing a secure channel of communication better than PGP or
pidgin/gaim-encryption/OTR. Just something simple as a decoder ring, you
can use to exchange secret messages, possibly via a always-on 3rd party
relay. So if anyone knows of such a thing, please let me know! Trying to
implement it is seriously out of my league, but... well someone has to
do it.

What encryption system works best with gnet? As horridly hackish and
clunky as it is, I was going to use gpgme. I don't think any kind of
SSL/certificate system is possible over gnet since that'd require gnet
to use something as a socket that wasn't a socket. Maybe a separate
process relaying sockets into SSL tunnels? I'm not really keen on the
idea of a certificate authority either. What about libOTR? The callbacks
in that library to "provide a GUI" always turned me off to it, since I
don't want the encryption code to be popping up windows and junk.

Should I do something crazy like make a program that registers a jabber
account, downloads pidgin and purple-otr, creates an accounts.xml file
and runs pidgin? And then adds ...people...to the buddy list...? x_x
Yeah, pidgin is way overcomplicated; tries to do too much at once.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHkpvRB/meY5RuPPQRAlKzAJ9h5k1HbNzSoZHBw/RL+avtkZNJOQCggWs6
vVDW/XjXnNxnQ2anJN9cnns=
=Inhl
-----END PGP SIGNATURE-----