{"action":"opened","issue":{"url":"https://api.github.com/repos/wireapp/wire-ios/issues/392","repository_url":"https://api.github.com/repos/wireapp/wire-ios","labels_url":"https://api.github.com/repos/wireapp/wire-ios/issues/392/labels{/name}","comments_url":"https://api.github.com/repos/wireapp/wire-ios/issues/392/comments","events_url":"https://api.github.com/repos/wireapp/wire-ios/issues/392/events","html_url":"https://github.com/wireapp/wire-ios/issues/392","id":189399408,"number":392,"title":"Timed messages provide no protection against malicious recipients","user":{"login":"0ki","id":3155267,"avatar_url":"https://avatars.githubusercontent.com/u/3155267?v=3","gravatar_id":"","url":"https://api.github.com/users/0ki","html_url":"https://github.com/0ki","followers_url":"https://api.github.com/users/0ki/followers","following_url":"https://api.github.com/users/0ki/following{/other_user}","gists_url":"https://api.github.com/users/0ki/gists{/gist_id}","starred_url":"https://api.github.com/users/0ki/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/0ki/subscriptions","organizations_url":"https://api.github.com/users/0ki/orgs","repos_url":"https://api.github.com/users/0ki/repos","events_url":"https://api.github.com/users/0ki/events{/privacy}","received_events_url":"https://api.github.com/users/0ki/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-11-15T14:01:28Z","updated_at":"2016-11-15T14:01:28Z","closed_at":null,"body":"The number one reason why existing user base chose _wire_ over other communication tools is the expectation of higher security.\r\n\r\nI empathise with the need to appeal to previously unclaimed audiences and timed messages is no doubt one of the ways to get there, however to minimise the impact on the high bar _wire_ has set for security it is crucial that every user, not just IT security specialists, are educated about the cosmetic nature of timed messages.\r\n\r\nTherefore I ask that **when using the timed messages for the first time each user is shown a one-time alert** informing them of the security that timed messages can and cannot provide.\r\n\r\nAs a sample here's a CC0 licensed text you may use:\r\n> WARNING! Timed messages are intended to be used only when you fully trust the parties receiving the message. They provide no protection against an adversary as there IS NO GUARANTEE that message will actually be removed on the other end, if the recipient is malicious.\r\n>\r\n> [I UNDERSTAND]"}}
{"actor":{"display_login":"0ki"}}