Question: about Gbridge's Security.

[popsywen]

Dear all,
Before I try to use this software, I am worrying about whether could Google server get my private documents. Cause it seems that access is built through google's server and I do not very understand the encryption method used here. Could anybody tell me something about it?
Thanks a lot!


Best Regard!

Derek;)

[admin]

- All the data communication between 2 computers are encrypted by AES.
- Most data communication are through direct link between two computers, so neither gbridge server or google server can see any of these traffic.
- Some data communication may be relayed by Gbridge servers if direct link is not possible, but the Gbridge servers know nothing about the encryption keys. Although the encryption keys are negotiated through the help of Google servers, Google servers also don't know the keys (please see http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchange).

No document data will be stored or relayed by Google servers.

[popsywen]

Thanks a lot！

[piusg]

What level of AES encryption does Gbridge use?

EDIT: Answered my own question. Should've read the FAQ in the first place!
http://www.gbridge.com/faq.php#sp60

[Unregistered]

While AES and SHA1 is the supreme stuff when it comes to encryption and authentication (well, AES 256 is better, but still...) I was wondering, with no offence intended, how can we trust this program? While the encryption is good, you might still have us fooled that there is such an encryption, while all traffic is sent through your servers and sniffed and analysed. What I'm trying to say is, is there a way for you as the manufacturer and admin of this program to authenticate yourselves? Any digital signatures from a trusted CA which you can provide or the alike?

Thanks,
Jeremy