mirror of
https://github.com/chatmail/core.git
synced 2026-04-20 06:56:29 +03:00
51b9e86d71
This way, the statistics / self-reporting bot will be made into an opt-in regular sending of statistics, where you enable the setting once and then they will be sent automatically. The statistics will be sent to a bot, so that the user can see exactly which data is being sent, and how often. The chat will be archived and muted by default, so that it doesn't disturb the user. The collected statistics will focus on the public-key-verification that is performed while scanning a QR code. Later on, we can add more statistics to collect. **Context:** _This is just to give a rough idea; I would need to write a lot more than a few paragraphs in order to fully explain all the context here_. End-to-end encrypted messengers are generally susceptible to MitM attacks. In order to mitigate against this, messengers offer some way of verifying the chat partner's public key. However, numerous studies found that most popular messengers implement this public-key-verification in a way that is not understood by users, and therefore ineffective - [a 2021 "State of Knowledge" paper concludes:](https://dl.acm.org/doi/pdf/10.1145/3558482.3581773) > Based on our evaluation, we have determined that all current E2EE apps, particularly when operating in opportunistic E2EE mode, are incapable of repelling active man-in-the-middle (MitM) attacks. In addition, we find that none of the current E2EE apps provide better and more usable [public key verification] ceremonies, resulting in insecure E2EE communications against active MitM attacks. This is why Delta Chat tries to go a different route: When the user scans a QR code (regardless of whether the QR code creates a 1:1 chat, invites to a group, or subscribes to a broadcast channel), a public-key-verification is performed in the background, without the user even having to know about this. The statistics collected here are supposed to tell us whether Delta Chat succeeds to nudge the users into using QR codes in a way that is secure against MitM attacks. **Plan for statistics-sending:** - [x] Get this PR reviewed and merged (but don't make it available in the UI yet; if Android wants to make a release in the meantime, I will create a PR that removes the option there) - [x] Set the interval to 1 week again (right now, it's 1 minute for testing) - [ ] Write something for people who are interested in what exactly we count, and link to it (see `TODO[blog post]` in the code) - [ ] Prepare a short survey for participants - [ ] Fine-tune the texts at https://github.com/deltachat/deltachat-android/pull/3794, and get it reviewed and merged - [ ] After the next release, ask people to enable the statistics-sending
122 lines
2.2 KiB
Rust
122 lines
2.2 KiB
Rust
//! # Delta Chat Core Library
|
|
|
|
#![recursion_limit = "256"]
|
|
#![forbid(unsafe_code)]
|
|
#![warn(
|
|
unused,
|
|
clippy::correctness,
|
|
missing_debug_implementations,
|
|
missing_docs,
|
|
clippy::all,
|
|
clippy::wildcard_imports,
|
|
clippy::needless_borrow,
|
|
clippy::cast_lossless,
|
|
clippy::unused_async,
|
|
clippy::explicit_iter_loop,
|
|
clippy::explicit_into_iter_loop,
|
|
clippy::cloned_instead_of_copied
|
|
)]
|
|
#![cfg_attr(not(test), forbid(clippy::indexing_slicing))]
|
|
#![cfg_attr(not(test), forbid(clippy::string_slice))]
|
|
#![allow(
|
|
clippy::match_bool,
|
|
clippy::mixed_read_write_in_expression,
|
|
clippy::bool_assert_comparison,
|
|
clippy::manual_split_once,
|
|
clippy::format_push_string,
|
|
clippy::bool_to_int_with_if
|
|
)]
|
|
|
|
#[macro_use]
|
|
extern crate num_derive;
|
|
#[macro_use]
|
|
extern crate smallvec;
|
|
#[macro_use]
|
|
extern crate rusqlite;
|
|
#[macro_use]
|
|
extern crate strum_macros;
|
|
|
|
#[macro_use]
|
|
pub mod log;
|
|
|
|
#[cfg(feature = "internals")]
|
|
#[macro_use]
|
|
pub mod sql;
|
|
#[cfg(not(feature = "internals"))]
|
|
#[macro_use]
|
|
mod sql;
|
|
|
|
pub mod headerdef;
|
|
|
|
pub(crate) mod events;
|
|
pub use events::*;
|
|
|
|
mod aheader;
|
|
pub mod blob;
|
|
pub mod calls;
|
|
pub mod chat;
|
|
pub mod chatlist;
|
|
pub mod config;
|
|
mod configure;
|
|
pub mod constants;
|
|
pub mod contact;
|
|
pub mod context;
|
|
mod decrypt;
|
|
pub mod download;
|
|
mod e2ee;
|
|
pub mod ephemeral;
|
|
mod imap;
|
|
pub mod imex;
|
|
pub mod key;
|
|
pub mod location;
|
|
pub mod login_param;
|
|
pub mod message;
|
|
mod mimefactory;
|
|
pub mod mimeparser;
|
|
pub mod oauth2;
|
|
mod param;
|
|
mod pgp;
|
|
pub mod provider;
|
|
pub mod qr;
|
|
pub mod qr_code_generator;
|
|
pub mod quota;
|
|
pub mod release;
|
|
mod scheduler;
|
|
pub mod securejoin;
|
|
mod simplify;
|
|
mod smtp;
|
|
pub mod stock_str;
|
|
mod sync;
|
|
mod timesmearing;
|
|
mod token;
|
|
mod update_helper;
|
|
pub mod webxdc;
|
|
#[macro_use]
|
|
mod dehtml;
|
|
mod authres;
|
|
pub mod color;
|
|
pub mod html;
|
|
pub mod net;
|
|
pub mod plaintext;
|
|
mod push;
|
|
mod stats;
|
|
pub use stats::SecurejoinSource;
|
|
pub use stats::SecurejoinUiPath;
|
|
pub mod summary;
|
|
|
|
mod debug_logging;
|
|
pub mod receive_imf;
|
|
pub mod tools;
|
|
|
|
pub mod accounts;
|
|
pub mod peer_channels;
|
|
pub mod reaction;
|
|
|
|
/// If set IMAP/incoming and SMTP/outgoing MIME messages will be printed.
|
|
pub const DCC_MIME_DEBUG: &str = "DCC_MIME_DEBUG";
|
|
|
|
#[cfg(test)]
|
|
mod test_utils;
|
|
#[cfg(test)]
|
|
mod tests;
|