Authors:
Iraklis Symeonidis
and
Gabriele Lenzini
Affiliation:
SnT, University of Luxembourg, Luxembourg
Keyword(s):
Security, Privacy, Threat Modeling, Decentralization, System Model, Private Messaging.
Abstract:
Modern email and instant messaging applications often offer private communications. In doing so, they share common concerns about how security and privacy can be compromised, how they should face similar threats, and how to comply with comparable system requirements. Assuming a scenario where servers may not be trusted, we review and analyze a list of threats specifically against message delivering, archiving, and contact synchronization. We also describe a list of requirements intended for whom undertakes the task of implementing secure and private messaging. The cryptographic solutions available to mitigate the threats and to comply with the requirements may differ, as the two applications are built on different assumptions and technologies.