This is an experiment/demonstration/exercise to create secure server/client communication model using Python.
- End-to-End encryption (read as, server cannot see who is sending what to whom)
- Message origin verification using digital signatures
- CLI client (ssl)
- Web (https + wss) client
Generate server pub/priv key pair:
$ cd priv/keys/server
$ ./genkey.sh
Start server:
$ python messaging.py --start server
In another terminal, start client 1:
python messaging.py --start client --uid 1
Go in another terminal and start client 2:
python messaging.py --start client --uid 2
Client 2 will send a message to client 1.
- Clients generate public/private key and send their public key to server upon connection
- Message is addressed from one public key to another public key
- Over the wire packet consists of sender public key, digital signature and encrypted message
- Anyone can verify packets on the wire using digital signatures
- Only destination client can decrypt message
- Cleanup communication protocol (redis style over ssl) and fix open security loop holes in current draft
- Methods for public key discovery of social friends and like minded people
- How to send message to all the devices of same user running with different public/private key?
- Acknowledgement and offline message persistence
- Investigate on self expiring messages?
- Message mime type support
- Publish tagged message to users subscribed to specific tags