[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#733860: marked as done (ITP: pond -- Forward secure, asynchronous messaging for the discerning.)

Your message dated Sun, 11 Oct 2015 13:00:27 +0000
with message-id <E1ZlGEl-0003Ea-0M@franck.debian.org>
and subject line Bug#733860: fixed in pond 0.1.1-1
has caused the Debian Bug report #733860,
regarding ITP: pond -- Forward secure, asynchronous messaging for the discerning.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
733860: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733860
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: wnpp
Severity: wishlist
Owner: Ximin Luo <infinity0@gmx.com>

* Package name    : pond
  Version         : 0:git~2014-01-01
  Upstream Author : Adam Langley <agl@imperialviolet.org>
* URL             : https://pond.imperialviolet.org/
* License         : BSD
  Programming Lang: Go
  Description     : Forward secure, asynchronous messaging for the discerning.

For secure, synchronous communication we have OTR and, when run over Tor, this is pretty good. But while we have secure asynchronous messaging in the form of PGP email, it's not forward secure and it gratuitously leaks traffic information. While a desire for forward secure PGP is hardly new, it still hasn't materialised in a widely usable manner.

Additionally, email is used predominately for insecure communications (mailing lists, etc) and is useful because it allows previously unconnected people to communicate as long as a (public) email address is known to one party. But the flip side to this is that volume and spam are driving people to use centralised email services. These provide such huge benefits to the majority of email communication, so it's unlikely that this trend is going to reverse. But, even with PGP, these services are trusted with hugely valuable traffic information if any party uses them.

So Pond is not email. Pond is forward secure, asynchronous messaging for the discerning. Pond messages are asynchronous, but are not a record; they expire automatically a week after they are received. Pond seeks to prevent leaking traffic information against everyone except a global passive attacker.

--- End Message ---
--- Begin Message --- 
Source: pond
Source-Version: 0.1.1-1

We believe that the bug you reported is fixed in the latest version of
pond, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 733860@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ximin Luo <infinity0@debian.org> (supplier of updated pond package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 06 Oct 2015 12:50:10 +0200
Source: pond
Binary: pond
Architecture: source amd64
Version: 0.1.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Privacy Tools Maintainers <pkg-privacy-maintainers@lists.alioth.debian.org>
Changed-By: Ximin Luo <infinity0@debian.org>
Description:
 pond       - forward secure, asynchronous messaging for the discerning
Closes: 733860
Changes:
 pond (0.1.1-1) experimental; urgency=medium
 .
   * Initial release. (Closes: #733860)
Checksums-Sha1:
 007148019ca84892e756d5771f8e396318e5e870 2032 pond_0.1.1-1.dsc
 60ea027175d7900253e29eb40ed0719e32b869f8 1089393 pond_0.1.1.orig.tar.gz
 facf1273d1655ca6ca46ba9cd2b097cd2b8c523c 4112 pond_0.1.1-1.debian.tar.xz
 f504c5d70bf7e9e01dd2e6d868923be9dd0820e0 2042706 pond_0.1.1-1_amd64.deb
Checksums-Sha256:
 aef112b0522632ce99ad6de42b7a38c701855a51aff499a0bf38cc862a57e715 2032 pond_0.1.1-1.dsc
 f66c625b0d7e3fe8c125fe9401a5f67ec75af3e8dca47e18fba6696a99705b21 1089393 pond_0.1.1.orig.tar.gz
 31df0befab20920844f34d34ae0452dc7db8646e46668476ddc5fc25a38d6aeb 4112 pond_0.1.1-1.debian.tar.xz
 908cda362ae4e3fb9190418e6d696bc4cfa5d38a639796d36aedb9bcfa9b88d8 2042706 pond_0.1.1-1_amd64.deb
Files:
 8c12d644f549a549c773264dd13bb403 2032 net optional pond_0.1.1-1.dsc
 0e9bc689768e309f455274aee1998402 1089393 net optional pond_0.1.1.orig.tar.gz
 fac35b904fb9e11bc4501be9ae8d986b 4112 net optional pond_0.1.1-1.debian.tar.xz
 2b4c6dda19a9c3449e7ce0f7bc7307d4 2042706 net optional pond_0.1.1-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=5/g6
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: