<story><title>Tox – An encrypted P2P chat protocol that does not rely on central servers</title><url>https://tox.chat/</url></story><parent_chain><item><author>woodruffw</author><text>I&amp;#x27;ll be the downer here and point out that Tox (both the specification and the c-toxcore implementation) have never undergone a security evaluation, and there are well-understood weaknesses in its security model &lt;i&gt;right now&lt;/i&gt;[1].&lt;p&gt;If you feel inclined to use Tox at all, you should do so &lt;i&gt;as a curiosity only&lt;/i&gt;.&lt;p&gt;[1]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;TokTok&amp;#x2F;c-toxcore&amp;#x2F;issues&amp;#x2F;426&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;TokTok&amp;#x2F;c-toxcore&amp;#x2F;issues&amp;#x2F;426&lt;/a&gt;</text></item></parent_chain><comment><author>giancarlostoro</author><text>Also weirdness with funds being stolen and team splits:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;chefkochblog.wordpress.com&amp;#x2F;2018&amp;#x2F;04&amp;#x2F;05&amp;#x2F;r-i-p-tox-messenger&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;chefkochblog.wordpress.com&amp;#x2F;2018&amp;#x2F;04&amp;#x2F;05&amp;#x2F;r-i-p-tox-mess...&lt;/a&gt;</text></comment>
<story><title>Tox – An encrypted P2P chat protocol that does not rely on central servers</title><url>https://tox.chat/</url></story><parent_chain><item><author>woodruffw</author><text>I&amp;#x27;ll be the downer here and point out that Tox (both the specification and the c-toxcore implementation) have never undergone a security evaluation, and there are well-understood weaknesses in its security model &lt;i&gt;right now&lt;/i&gt;[1].&lt;p&gt;If you feel inclined to use Tox at all, you should do so &lt;i&gt;as a curiosity only&lt;/i&gt;.&lt;p&gt;[1]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;TokTok&amp;#x2F;c-toxcore&amp;#x2F;issues&amp;#x2F;426&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;TokTok&amp;#x2F;c-toxcore&amp;#x2F;issues&amp;#x2F;426&lt;/a&gt;</text></item></parent_chain><comment><author>im3w1l</author><text>I read about 20 replies of that and it does sound a bit overblown. Yes - the protocol is not perfect, but the flaw is a minor one. It could even be considered a feature request - preserve semblance of security after key compromise. If it can be done sure, by all means! But does not necessitate panic or rushing things - that would be more dangerous.</text></comment>