From 13fb30c8fc72e45a2dfb170322deff4b9ffd82bc Mon Sep 17 00:00:00 2001 From: varac Date: Tue, 21 Jun 2016 11:21:55 +0200 Subject: added cardiff2015 slides --- cardiff2015/slides/index.html | 296 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 296 insertions(+) create mode 100644 cardiff2015/slides/index.html (limited to 'cardiff2015/slides/index.html') diff --git a/cardiff2015/slides/index.html b/cardiff2015/slides/index.html new file mode 100644 index 0000000..5f7f6a6 --- /dev/null +++ b/cardiff2015/slides/index.html @@ -0,0 +1,296 @@ + + + + + +LEAP/Pixelated Introduction + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ +
+ +
+
+

LEAP Encryption Access Project

+
+
+
+

Bring back the 1990s!

+
+
+

What is Federation?

+

+
    +
  • user → provider → provider → user
    • +
  • eg: SMTP, XMPP
    • +
+

+
+
+

Better federation

+

+
    +
  • The users should be protected from the provider.
    • +
  • The provider should be protected from users.
    • +
+

+
+
+

What does
LEAP do?

+
    +
  1. +LEAP Platform:
    a toolkit to make it easy for you to run a service provider.
    2. +
  2. +New protocols:
    so that users don't need to trust the provider.
    3. +
  3. +Bitmask client:
    a client that works smoothly with any compatible provider.
    4. +
+
+
+

LEAP Platform

+ 
sudo gem install leap_cli
+leap new example --domain example.org
+cd example
+leap add-user --self
+leap cert ca
+leap cert dh
+leap cert csr
+leap node add blueberry services:openvpn \
+     ip_address:1.1.1.1 openvpn.gateway_address:1.1.1.2
+leap node add raspberry services:couchdb,webapp \
+     ip_address:1.1.1.3
+leap init node
+leap deploy
+
+
+
+

New Protocols

+
    +
  • +Soledad: searchable client-encrypted synchronized database.
    • +
  • +Bonafide: secure user registration, authentication, password change, etc.
    • +
  • +Key management: precise rules for OpenPGP best practices, automated.
    • +
+
+
+

Bitmask client

+
+ +
+
+ +
+
+
+

Current Services: VPN

+
    +
  • Easy to use.
    • +
  • Route all your internet trafic through an encrypted channel.
    • +
  • Prevent eavesdropping (thiefs in the public network, police, ...).
    • +
  • Circunvent internet censorship.
    • +
  • Prevent leaks (DNS, IPv6, ...).
    • +
+
+
+

Current Services: email

+

+ Work in progress +

+
    +
  • Easy to use.
    • +
  • End-to-end encryption.
    • +
  • Automatic key discovery and validation.
    • +
  • Backwards compatible with email and current OpenPGP usage.
    • +
  • Service provider has no access to user data.
    • +
  • Strong protection for metadata, when supported.
    • +
  • Cloud synchronized for high availability on multiple devices.
    • +
+
+
+
+

Our goals:

+
    +
  • Mass adoption
    • +
  • Increase the cost of dragnet surveillance
    • +
+
+
+
+
+

Pixelated Useragent

+
    +
  • Bitmask client and Email Client combined.
    • +
  • Modern, good looking UI.
    • +
  • Integrated search, search index encrypted
    • +
  • Tagging
    • +
+
+
+
+

Activist Setup

+
    +
  • Useragent needs to get installed locally
    • +
  • Private Keys on local device
    • +
+
+
+

Organisation Setup

+
    +
  • Multi-User encrypted Webmail
    • +
  • No Installation, access via browser
    • +
  • Private Keys on the server
    • +
  • Activist Setup possible on individual choice
    • +
+
+
+
+
+

Metadata

+
    +
  • Simple Mail Transfer Protocol from 1982 (!)
    • +
  • Email exposes lots of metadata (Date:, From:, To:, Subject:, Useragent:)
    • +
  • "Memory Hole" proposal to hide metadata in gpg encrypted mail
    • +
  • Enforce Transport Security whenever possible.
    • +
+
+
+
    +
  • +
+
+
+
+ +

 

+

 

+ +
+
+ +
+
+ + + + + + + + -- cgit v1.2.3