Flock Threat Model/ Use Cases about flock

[rhodey]

@zmanian the security model is definitely different than TextSecure or Redphone (or Signal) but it seems like you have the right idea :)

I expect that most confusion over Flock arises when people try to relate it to existing Open Whisper Systems projects. Unlike TextSecure, Flock considers the Android device it is running on to be trusted. The reason for this difference is basically that contacts and calendars are integrated more into the Android OS than messaging is. If we wanted Flock to have the same security model as TextSecure we would need to replace the default contacts and calendars applications and integration with any 3rd party apps would be impossible. Also the user would need to provide a passphrase on boot or something.

With Flock (and all apps really) we want two things:

1. data secure in transit
2. data secure while at rest

Flock definitely covers the first, we decided to leave the second up to the OS and we think it's close. Modern versions of Android support encryption natively so that's great, the only remaining heartache is Android's permissions system. Early releases of KitKat included a permissions management UI much like that in Cyanogenmod-- then Google took it out. I think that users of Flock running Cyanogenmod have exactly what we want and that users of vanilla or manufacturer "skinned" Android will soon have the same.

Also, obligatory hype: as soon as someone does "secure webmail" (or some derivation) correctly we can easily integrate Flock and provide a true Gmail replacement. The overarching idea is that If we can mirror the functionality of the privacy invading cloud with a privacy preserving cloud then the former will go out of style.

[zmanian]

More specifically than trusting the Android device, Flock trust that Android device user, owner or policy manager has secured access to the device in a way appropriate to the respective threat model. i.e. disk encryption and an a strong passphrase. Text Secure's default settings are stronger than this.

Neither Flock not TextSecure will do much to help you if your phone got owned by HackingTeam malware or a similar product and the phone itself is now untrustworthy.