[tor-bugs] #7085 [Tor bundles/installation]: Integrate Cryptocat Browser Extension into Tor Browser Bundle

[Tor Bug Tracker & Wiki]

#7085: Integrate Cryptocat Browser Extension into Tor Browser Bundle
--------------------------------------+-------------------------------------
 Reporter:  kaepora                   |          Owner:  erinn                        
     Type:  enhancement               |         Status:  new                          
 Priority:  normal                    |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  Tor bundles/installation  |        Version:  Tor: unspecified             
 Keywords:                            |         Parent:                               
   Points:                            |   Actualpoints:                               
--------------------------------------+-------------------------------------

Comment(by kaepora):

 Hey guys,

 We recently received the results of our first full audit (completed by
 Mario Heindrich's team) and we've been busy fixing the bugs he's
 discovered. We've fixed around a dozen bugs (including a couple of
 critical ones!) so that was a really great audit and Cryptocat is in a
 much better situation right now.

 I'm really glad to see that you guys think it's a good idea to try out
 Cryptocat integration. Our code certainly needs every bit of auditing it
 can get; we're still beta software and if you want to audit it some more
 before including it in something like Tor then by all means please do so.

 Overall, and once Cryptocat is verified to your satisfaction, I believe it
 would be a good alternative to web-based chat services such as Facebook
 Chat - however, we need to be clear on it not being a replacement to PGP
 and the like.

 I also wonder if Cryptocat would be bundled with TAILS.

 mikeperry: Yes, jsctypes is necessary so we can access nsslib for secure
 random number generation in Firefox. Chrome and Safari support
 window.crypto.getRandomValues() so we don't need to do that there, but
 it's been a total nightmare to get that implemented in Firefox and we'll
 need to use jsctypes until it does get implemented.

 We're also working on Thunderbird integration anyway:
 !https://github.com/cryptocat/cryptocat/issues/144

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7085#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online