Hello guys, thanks for this cool app. I have one noob question:
Are the calls encrypted also? How safe they are from man-in-middle attacks? Can I read more about it somewhere?
Also off topic proposal, please add docker deployment for chatmail relay.
Thank you!
Yes. Calls work on WebRTC, which means that it uses DTLS for encryption.
The signaling messages, which are responsible for exchanging DTLS fingerprints, are sent over the same channel that your regular messages are sent over. Calls are as MITM-secure as this channel is.
All you need to read about is how WebRTC works. Delta Chat isn’t doing anything special. https://webrtcforthecurious.com/ is a nice resource IMO.
Great, thank you!