Does Zfone have any “back doors”?
Anyone who knows anything about me knows the answer is No. In fact, I have a whole page on that subject regarding PGP software, and it applies equally to Zfone. Now, having said that, I remind you that Zfone is still beta software, and has a few bugs. Until I do a real release, I make no claims about it being secure. We haven’t finished our internal code reviews, and we may yet discover bugs that affect security. That’s also why we have a public beta. We need you to help us test the code. A good rule of thumb about how you can tell if there is no back door in a product: Do they publish their source code? I do. I publish the source code for Zfone, just as I did with PGP. You can inspect it yourself, and build the executable from the source code yourself. I don’t feel comfortable trusting a crypto product if they don’t publish their source code. It’s easy to keep back doors out of your own product, as I do with Zfone. It’s much harder to keep back doors out of other vendors’ implementati
