<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">On 24 Jul 2014, at 16:22, Simon Tennant <<a href="mailto:simon@buddycloud.com">simon@buddycloud.com</a>> wrote:<br><div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">Agree on 5222. But it smells like XMPP according to <a href="https://www.os3.nl/_media/2013-2014/courses/ssn/projects/threema_report.pdf">https://www.os3.nl/_media/2013-2014/courses/ssn/projects/threema_report.pdf</a></div></blockquote><br></div><div>They seem pretty sure about it:</div><div><br></div><div>"The communication protocol used for this communication is Extensible</div><div>Messaging and Presence Protocol (XMPP). XMPP implements Simple</div><div>Authentication and Security Layer (SASL) and Transport Layer Security</div><div>(TLS) for its security. This means that MitM attack might be feasible for</div><div>this communication"</div><br><div>—</div><div>Ash</div></body></html>