RedPhone is now Open Source

It appears that moxie has already been heavily harassed by the US gov for unknown reasons, prior to this software release. So, I'm not really sure he will be that concerned with your warning.

While Tor and RedPhone might be considered to be in the same class of consumer security software, I don't think it's fair to draw comparisons to Appelbaum.

Twitter owns Whisper Systems. So it's really Twitter releasing it as Free software. Same with the Text Secure application.

> See what they did and do with Jacob Appelbaum

...and he doesn't even write software!

Check the wiki: https://github.com/WhisperSystems/RedPhone/wiki

Read "Encryption Protocols" (uses ZRTP -see rfc6189- for key negotiation). Although I'm not sure I understand what is this about, I didn't notice at first it is VoIP :)

RedPhone uses a really interesting system. The first time you initiate a call with someone redphone displays a word that is based on the keys exchanged. Each user talks about the word and confirms they got the same word, thereby verifying that there is no man in the middle.

The assumption is that it is hard for an attacker to forge and inject a believable conversation into an ongoing real time conversation.

This is call SAS or Short Authenticated Strings and I believe it was introduced in the paper 'Secure Communications over Insecure Channels Based on Short Authenticated Strings' (the pdf can be found off of google). You can read about it here: http://en.wikipedia.org/wiki/ZRTP#Authentication

Maybe you and I just haven't found the right frequency yet. =)

As money is becoming completely digital and completely tracked, digital anonymous money will also be on the rise, be that Bitcoin or something else.

From browsing the source and referencing the architecture section of the wiki ( https://github.com/WhisperSystems/RedPhone/wiki/Architecture... ), there is a RedPhone master server (master.whispersystems.org:31337) and a relay server (relay.whispersystems.org:31337) that the phone will use during the course of all phone calls.

Apparently, most cell phone network providers disallow direct peer-to-peer communication, thus the relay server is necessary to complete this kind of encrypted call. All of your encrypted voice data will pass through the relay server, so there isn't going to be much privacy in terms of who you are talking to at what times, but the contents of your voice call won't be revealed.

I would like to see the server software freed as well.

I submitted the OSS build to the "Play Store" about 30 minutes ago, but it's still not visible. Seems like a caching bug in Google's stuff.