[jitsi-dev] Explanation of impl.gui.I_DONT_CARE_THAT_MUCH_ABOUT_SECURITY ?


#1

Hi there,

What does setting 'impl.gui.I_DONT_CARE_THAT_MUCH_ABOUT_SECURITY' to true
(in resources/config/default.properties ) do? Does it have any effect on
enabling / disabling encryption or showing/not showing the ZRTP panel?


#2

What does setting 'impl.gui.I_DONT_CARE_THAT_MUCH_ABOUT_SECURITY' to true (in
resources/config/default.properties ) do? Does it have any effect on enabling
/ disabling encryption or showing/not showing the ZRTP panel?

It disables certificate validation and is for debugging purposes only. Leave it be.

Ingo


#3

Some googling led me to this commit:

https://java.net/projects/jitsi/lists/commits/archive/2012-04/message/45

where it was added. The commit message is " Makes appearance of zrtp
confirmation panel configurable."

Are you sure it doesn't do anything with that zrtp panel?

···

On Tue, Jan 20, 2015 at 2:48 AM, Ingo Bauersachs <ingo@jitsi.org> wrote:

> What does setting 'impl.gui.I_DONT_CARE_THAT_MUCH_ABOUT_SECURITY' to
true (in
> resources/config/default.properties ) do? Does it have any effect on
enabling
> / disabling encryption or showing/not showing the ZRTP panel?

It disables certificate validation and is for debugging purposes only.
Leave it be.

Ingo

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#4

A ctrl + f through the source tree shows that its only used in
ConferencePeerPanel.java and OneToOneCallPeerPanel.java and doesn't seem to
have been modified since that commit in 2012.

I think its purpose is to configure the ZRTP panel

···

On Tue, Jan 20, 2015 at 2:53 AM, Ali Akhtar <ali.rac200@gmail.com> wrote:

Some googling led me to this commit:

https://java.net/projects/jitsi/lists/commits/archive/2012-04/message/45

where it was added. The commit message is " Makes appearance of zrtp
confirmation panel configurable."

Are you sure it doesn't do anything with that zrtp panel?

On Tue, Jan 20, 2015 at 2:48 AM, Ingo Bauersachs <ingo@jitsi.org> wrote:

> What does setting 'impl.gui.I_DONT_CARE_THAT_MUCH_ABOUT_SECURITY' to
true (in
> resources/config/default.properties ) do? Does it have any effect on
enabling
> / disabling encryption or showing/not showing the ZRTP panel?

It disables certificate validation and is for debugging purposes only.
Leave it be.

Ingo

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#5

A ctrl + f through the source tree shows that its only used in
ConferencePeerPanel.java and OneToOneCallPeerPanel.java and doesn't seem to
have been modified since that commit in 2012.

I think its purpose is to configure the ZRTP panel

Hm, yes, sorry I was confusing it with ALWAYS_TRUST_MODE_ENABLED. Anyway, if you don't want ZRTP then disable it in the protocol options.

Ingo


#6

Will that only disable the panel, or will that be the same as disabling
encryption in tools -> options -> account -> encryption?

Thanks.

···

On Tue, Jan 20, 2015 at 3:06 AM, Ingo Bauersachs <ingo@jitsi.org> wrote:

> A ctrl + f through the source tree shows that its only used in
> ConferencePeerPanel.java and OneToOneCallPeerPanel.java and doesn't seem
to
> have been modified since that commit in 2012.
>
> I think its purpose is to configure the ZRTP panel

Hm, yes, sorry I was confusing it with ALWAYS_TRUST_MODE_ENABLED. Anyway,
if you don't want ZRTP then disable it in the protocol options.

Ingo

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#7

Will that only disable the panel, or will that be the same as disabling
encryption in tools -> options -> account -> encryption?

I was talking about this path. So yes, that will disable the encryption. But ZRTP encryption without the panel is useless as you need to compare the hash, as other have pointed out before on the list.

Thanks.

Ingo