[Galene] Re: Command-line client for Galene file transfer

[Juliusz Chroboczek <jch@irif.fr>]

> a native command-line client for file transfer.

To answer in public the question I got by private mail:

  - the transfer is peer-to-peer, the server is only used for NAT
    traversal and for exchanging cryptographic keys; hence, you're not
    putting any significant load on the server if you use this to backup
    the collection of movies that you legally acquired;

  - the transfer is encrypted end-to-end; however,

     (1) the server gets to learn the filenames and file sizes;
     (2) the server can trivially mount an MiTM attack.

    so you must use a trusted server if you wish to preserve a semblance
    of privacy.

I am fairly confident that the latter caveat also applies to Zoom's
"end-to-end" encryption.  Do not trust any software, especially if you
didn't write it yourself.

-- Juliusz