Niltalk

This is an awesome service. Thanks for making it available to everyone. Can I ask what the use case is for this? I talk to my friends using FB messenger or Google chat and my…

Really interesting to read through the source code and get an idea of how you're using Go to write APIs, thanks for sharing!

I only feel safe using end-to-end encrypted chatrooms. Currently, niltalk can read every message. At the very least, AES encrypting messages by the chatroom's password will…

Yes except it's all plain-text on the server?

Yes, there is no end to end encryption as of now, although there is no persistence or storage of any sorts on the server.

Good work. Though I have to say I've seen so many of these web-based "secure, private, anonymous" chat services now, I've lost track. What we need is end-to-end encryption and…

Users fall into two categories: 1) Don't really care about privacy. Might not want their chat on the front page of the papers, but aren't going to go to great lengths to achieve…

> That's kind of a shame. It would be nice if apps distributed over the web could be signed the same way they are from repositories. This sounds like a theoretical impossibility.…

The number of bcrypt rounds is extremely low, too[1]. While the Go bcrypt lib will actually accept a cost of 5, that seems an unreasonably low value to me. Coupled with…

It's in a redis database, so it's not all that hard to get at, either, should someone compromise the system. "Not on disk" stops being such a good defence when it's stored in a…

Good work. Though I have to say I've seen so many of these web-based "secure, private, anonymous" chat services now, I've lost track. What we need is end-to-end encryption and…

As all clients need a password to enter a room, the messages could be encrypted with that password. There are a lot of JS libraries that could do this, e.g. Triplesec

first off... this is great! I wonder if you could make it so when you create a room, you can attach a message. So for instance i could generate a password then sign it with my…

It's critical to ensure that anyone who is connected is able to quickly dispose of the room for security / privacy reasons. And if you're not a small number of trusted…

The dispose button is far too inviting where it is. I started to click it thinking it was the submit button till I read the text. Perhaps put it somewhere top right or someplace…

It's critical to ensure that anyone who is connected is able to quickly dispose of the room for security / privacy reasons. And if you're not a small number of trusted…

How one runs this? I installed go, and redis. The ran "go get github.com/goniltalk/niltalk", which installed. The previous command created three directories under my $GOPATH, one…

Guess we can check the code and see for ourselves, of course. Alas, you can't really know if the code on Github is actually the same running on their servers.

Author here. I concur, just like any other open source software running as a hosted service. It has to be trust based.

I only feel safe using end-to-end encrypted chatrooms. Currently, niltalk can read every message. At the very least, AES encrypting messages by the chatroom's password will…

New keypairs would be generated on the client every time you join a chatroom. Another member of the chatroom sends you the shared_key encrypted by your public key. Server knows…

I only feel safe using end-to-end encrypted chatrooms. Currently, niltalk can read every message. At the very least, AES encrypting messages by the chatroom's password will…

Use keybase.io