Slashdot Mirror

Anyone know about Ciphire?

https://www.ciphire.com/

Here's an idea that I haven't the time nor the inclination to work on. At work (a network security research team) we have begun using Ciphire. It installs itself between the operating system and the network stack. Any mail that goes out, no matter the client, is encrypted and then transported. Any and all mail going out being sent from registered email accounts is seemlessly encrypted without user interaction.

Now, my question is why don't we have a content filter available to parents that filters out any and all communication destined for websites/address blocks on a blacklist no matter the method? The current method of filtering seems to be configuring web browsers to use some software as a proxy. This is easily bypassed despite the user's permissions on the box. At least I've done it many times with, say, Norton Internet Security.

Just an idea. One I think could be worth something. Now, if any of you guys do decide to implement this, I'm gonna sue your ass for stealing my intellectual property as I have just now thought of this and it is all mine! All I need to do is bookmark this post and I;ll have all the evidence I need! I'll be rich!

Two more things I'd like to point out about the project.

It was clear to all the participants that a release which
isn't open source right away would be seen by many
people with doubts. I'd even have them myself, if I
hadn't seen the source. :) We know and understand.

This is just an early release, where we wait for user
feedback, optimize good parts of the code for
extensibility and audits, and then, do such audits,
then, it's a promise, you'll get the code, not GPL, but
definitely open source. We expect quite some people
to forget about this now and wait until then. However,
if you don't code-review your other OSS, counting on
peer review, you might as well use it now, as it _has_
even now already been peer reviewed by others.

About the license and being 'free' - this is a company,
but as little as commercial as possible - the aim is
really a community of enlightened crypto users.
Ciphire will, always, stay FREE for end-users, and
non-commercial institutions. We need to earn money
to run servers and maintain code. We will charge from
companies for company-editions eventually for that.
We need a business license to be on the safe side for
that, too, but there's nothing unusual about it.

Btw - we will not forever have or want to run these
servers alone - while they're not fully decentralized,
they are not centralized as well, they just need to sync
so that certificate information is globally unique. Your
public key on those servers can never be manipulated
either, even if we wanted (see FAQ).

I'm not going into every detail or question here, but I'd
like to point out that there are official Ciphire forums,
where really everything asked is answered, fast:

forum.ciphire.com

Thanks for your attention:)

I forwarded this to fk6, but this has already been answered on their board. Have a look at their privacy policy.

I forwarded this to fk6, but this has already been answered on their board. Have a look at their privacy policy.

what should they give to other people, your public certificate, I hope so:) From what I have read, and there is also a post here, where this was discussed on macslash, they don't gather any more information, then your email address and your public key. Still they should clarify that, I send fk6 a pm about it, let's see what he says.