Tor has unveiled, a new chat tool in an effort to improve the security of online messaging.
Tor Messenger enables users to chat over the Tor network in a way which hides the location of participants. Which means that the contents of messages will only be visible to the participants.
Tor Messenger will also work with platforms like Facebook even in countries where they are banned. This tool is currently in beta and will undergo security tests.
There will be an option, that users wishing to remain anonymous or access chat clients blocked in their own country could use Tor Messenger to chat via services like Facebook Chat, Google Talk, Twitter, Yahoo and Internet Relay Chat.
But, the program does not communicate via what’s often called the “dark web”, a collection of hidden websites and services, but instead of sending messages across a series of internet relays which is called “bridges” or routers so that their origin cannot be tracked.
Steven Murdoch, a security researcher at University College London who has worked on Tor projects explained, “They’re computers run by volunteers and in a censored area your computer will connect to these,” and “Those services are not publicly listed anywhere – they should not be blocked even if access to the Tor network is blocked.”
Additionally, the messages may be encrypted to provide additional security. Now, this feature is enabled by default, though both parties in a one-to-one chat would have to have off-the-record encryption (OTR) set up.
What it needs is, the two parties to exchange a secret key which is needed to decode the messages they send to each other.
Jim Killock, executive director of the Open Rights Group, said, “At the end of the day some people really do need privacy and security so this would be important to them,” he also said that he imagined the tool, once audited, could be used by whistleblowers, individuals wanting to complain about corruption or sources desiring to speak to journalists anonymously about a story.
Further, he added, “I think it shows the worries people have that chats and other clients are being snooped on.”
Dr Murdoch also explained that while the service was still being tested, it shouldn’t be used by those who have serious security concerns, “It’s good for people to experiment with but not if you’ve got serious security requirements yet.”