Anyone in the HN community working on PGP encryption for the iPhone/Android? Not in the hushmail vein, but using the Thunderbird/Enigmail implementation of GnuPG as the model instead? Thoughts?
How do you verify the identity of the other person? That is, how do they prevent man in the middle attacks?
a question: They do not use SIP are they injecting a third party switch in order to avoid having to use Sip and thus opening themselves up to the legal back door they mention?
Pretty sure that ZRTP negotiates the session over the media layer (RTP.. thus Zimmerman RTP), thus avoiding the need for a switch to any other system outside the two users to set up the call.