Wire: History
View Latest Version
Please note this is an old version of this entry, which may differ significantly from the current revision.
Subjects: Computer Science, Software Engineering
Contributor:
HandWiki

Wire is an encrypted communication and collaboration app created by Wire Swiss. It is available for iOS, Android, Windows, macOS, Linux, and web browsers such as Firefox. Wire offers a collaboration suite featuring messenger, voice calls, video calls, conference calls, file-sharing, and external collaboration – all protected by a secure end-to-end-encryption. Wire offers three solutions built on its security technology: Wire Pro – which offers Wire's collaboration feature for businesses, Wire Enterprise – includes Wire Pro capabilities with added features for large-scale or regulated organizations, and Wire Red – the on-demand crisis collaboration suite. They also offer Wire Personal, which is a secure messaging app for personal use.

  • end-to-end-encryption
  • collaboration
  • firefox

1. History

Skype's co-founder Janus Friis helped create Wire and many Wire employees previously worked for Skype.[1] Wire Swiss GmbH launched the Wire app on 3 December 2014. In August 2015, the company added group calling to their app.[2] From its launch until March 2016, Wire's messages were only encrypted between the client and the company's server. In March 2016, the company added end-to-end encryption for its messaging traffic, as well as a video calling feature.[3][4] Wire Swiss GmbH released the source code of the Wire client applications in July 2016.[5][6] In 2018, Wire launched its collaboration solution featuring end-to-end encrypted chat, conferencing, video calls and file-sharing on desktop and mobile for businesses.[7]

2. Features

Wire offers end-to-end encrypted messaging, file-sharing, video and voice calls, and guest rooms for external communication.[8]

The app allows group calling with up to twenty-five participants and video conferences support up to 12 people.[9][10] A stereo feature places participants in "virtual space" so that users can differentiate voice directionality.[2] The application adapts to varying network conditions.

The application supports the exchange of animated GIFs up to 5MB through a media integration with Giphy.[11] The iOS and Android versions also include a sketch feature that allows users to draw a sketch into a conversation or over a photo.[12]

Wire is available on mobile, desktop and web. The web service is called Wire for Web.[13] Wire activity is synced on iOS, Android and web apps.[14] The desktop version supports screen sharing.[15]

Wire's technology solution can be deployed either in the cloud, private cloud or on-premises.[16]

One of the latest features rolled out by Wire is a secure external collaboration capability called 'guest room'.[17] Wire's secure guest rooms feature extends end-to-end encryption to conversations with external parties without requiring them to register, or even download anything.[18]

Wire also includes a function for ephemeral messaging in 1:1 and group conversations.[19][20]

3. Technical

Wire provides end-to-end encryption for all features. Wire's instant messages are encrypted with Proteus, a protocol that Wire Swiss developed based on the Signal Protocol.[21][22] Wire's voice calls are encrypted with DTLS and SRTP.[2][21] In addition to this, client-server communication is protected by Transport Layer Security.[1]

Wire is currently in the midst of working to develop Messaging Layer Security (MLS), a new protocol designed to facilitate more secure enterprise messaging platforms under The Internet Engineering Task Force (IETF).[23] In 2016, during the IETF meeting in Berlin, Wire proposed a standard that was protected by modern security properties and could be used by companies large and small.[23] During an interview with Dark Reading,[23] Raphael Robert, Head of Security at Wire, mentioned that Messaging Layer Security (MLS) should be ready to integrate into messaging platforms by 2021.

Wire's source code is accompanied by the GPLv3 but the readme file states that a number of additional restrictions specified by the Wire Terms of Use take precedence.[24][25][26] Among other things, users who have compiled their own applications may not change the way it connects and interacts with the company's centralised servers.[27][28]

4. Security

Wire implemented a security by design approach, with security and privacy as core values.[7] Wire is 100% open source with its source code available on GitHub, independently audited, and ISO, CCPA, GDPR, SOX-compliant.[29][30]

In December 2016, Wire's whitepapers were reviewed by a security researcher at the University of Waterloo.[31] The researcher praised Wire for its open approach to security, but identified serious issues that still need addressing. These included a man-in-the-middle attack on voice and video communications, possible audio and video leakage depending on unspecified codec parameters, the fact that all user passwords are uploaded to Wire's servers, significant attack surface for code replacement in the desktop client, and the fact that the server was not open-sourced, at the time when that article was written. The researcher described the security of Wire as weak in comparison to Signal, but also depicted its problems as surmountable. Wire's developers announced the addition of end-to-end authentication to Wire's calls on 14 March 2017,[32] and started open-sourcing Wire's server code on 7 April 2017.[33] In March 2017, the review was updated with the conclusion that "the remaining issues with Wire are relatively minor and also affect many of its competitors."[31] However, one major issue that remained was detailed as "the Wire client authenticates with a central server in order to provide user presence information. (Wire does not attempt to hide metadata, other than the central server promising not to log very much information.) The Wire whitepapers spend an unusual amount of space discussing the engineering details of this part of the protocol. However, the method of authentication is the same as it is on the web: the Wire client sends the unencrypted, unhashed password to the central server over TLS, the server hashes the plaintext password with scrypt, and the hash is compared to the hash stored by the server. This process leaks the user's password to the central server; the server operators (or anyone who compromises the server) could log all of the plaintext passwords as users authenticate."[31]

On 9 February 2017, Kudelski Security and X41 D-Sec published a joint review of Wire's encrypted messaging protocol implementation.[34] Non-critical issues were found that had the potential of leading to a degraded security level. The review found that "invalid public keys could be transmitted and processed without raising an error."[34] The report also recommended that other security improvements be implemented to address thread-unsafety risks and sensitive data in memory.[34] Wire's developers have said that "the issues that were discovered during the review have been fixed and deployed on iOS and Android. Deployment is ongoing for Wire for Web and desktop apps."[35]

In 2017, Wire published an article going over the implementation of its end-to-end encryption in a multi-device scenario in response to anonymous accounts on social media publishing misleading information about the app and its security.[36]

In May 2017, Motherboard published an article saying that the Wire servers "keep a list of all the users a customer contacted until they delete their account".[37] Wire Swiss confirmed that the statement was accurate, saying that they keep the data in order to "help with syncing conversations across multiple devices", and that they might change their approach in the future.[37]

5. Awards

In July 2019, Wire won Capterra's Best Ease of Use award [38] in the team communication software category for its B2B solution. Later that year in October, Wire was recognized by Cybersecurity Breakthrough Awards [39] as the first-ever Secure Communications Solution of the Year awardee. In February 2020, Wire won the Cybersecurity Excellence Awards[40] in the following categories: fastest-growing cybersecurity company, best start-up (EU), open-source security, encryption, and zero-trust security.[41] Simultaneously, Cyber Defense Magazine[42] announced Wire as the Best Messaging Security in an RSA 2020 special edition for the Cyber Defense Awards.[43]

6. Privacy Policy Changes

In late 2019, Wire holding moved from Luxembourg to the US, which according to ThinkPrivacy and other critics made it unclear how much jurisdiction the United States will have over Wire data. Some people considered this especially problematic as Wire stores unencrypted meta data for every user.[44] At the time of the transfer Wire also changed its privacy policy from "sharing user data when required by law" to "sharing user data when necessary", which was seen by critics as a more unclear determination that could also mean increasing profits, co-operation with law enforcement or any other reason.[45]

The Wire Group Holding moved back to Germany as of 2020.[46]

7. Business Model

Wire Swiss GmbH receives financial backing from a firm called Iconical.[4]

In July 2017, Wire Swiss announced the beta version of an end-to-end encrypted team messaging platform.[47] In October 2017, Wire officially released the team messaging platform as a subscription-based communication solution for businesses[48] and in 2019, announced that Ernst & Young chose Wire to develop a self-hosted, secure collaboration and communication platform.[49]

The content is sourced from: https://handwiki.org/wiki/Software:Wire

References

  1. Dredge, Stuart (3 December 2014). "Skype co-founder backs Wire - to take on Skype". https://www.theguardian.com/technology/2014/dec/03/wire-communications-skype-janus-friis-app. 
  2. Pierce, David (12 August 2015). "Messaging App Declares War on Crappy Conference Calls". Wired (Condé Nast). https://www.wired.com/2015/08/wire-declares-war-on-terrible-conference-calling/. Retrieved 12 August 2015. 
  3. Kahn, Jeremy (10 March 2016). "Amid Apple's FBI fight, app developers are ramping up encryption". Tribune Publishing. http://www.chicagotribune.com/news/sns-wp-blm-encryption-10a6b3d8-e6da-11e5-a9ce-681055c7a05f-20160310-story.html. 
  4. Auchard, Eric (11 March 2016). "Skype co-founder launches ultra-private messaging, with video". Reuters (Thomson Reuters). https://www.reuters.com/article/us-dataprotection-messaging-wire-idUSKCN0WC2GM. 
  5. Meyer, David (22 July 2016). "Wire Wants to Bring Encrypted Chat to Cars and the Internet of Things". Time Inc.. http://fortune.com/2016/07/22/wire-open-source/. 
  6. "Wire Swiss GmbH". https://github.com/wireapp/. 
  7. "Wire brings secure collaboration to North America". https://www.businesschief.com/leadership/7265/Wire-brings-secure-collaboration-to-North-America. 
  8. "The most secure collaboration platform · Wire". https://wire.com/en/. 
  9. Trueman, Charlotte (6 October 2020). "Wire targets Zoom, Teams and others with secure video upgrades". https://www.computerworld.com/article/3584565/wire-targets-zoom-teams-and-others-with-secure-video-upgrades.html#:~:text=Secure%20communication%20platform%20Wire%20has,call%20with%20up%20to%2025.. 
  10. "Start a video conference call". http://support.wire.com/hc/en-us/articles/360001019225. 
  11. "Wire and Giphy Make Communication Fun". AppMess. 30 June 2015. http://appmess.com/news/25434-wire-and-giphy-make-communication-fun/. 
  12. "Communicating "I Love You" in the Emoji Era". PSFK. http://www.psfk.com/2015/07/communication-trends-emoji-era-snapchat-swiftkey-giphy.html. 
  13. Perez, Sarah. "Skype Co-Founder Backs Wire, A New Communications App Launching Today On iOS, Android And Mac". TechCrunch. https://techcrunch.com/2014/12/02/skype-co-founder-backs-wire-a-new-communications-app-launching-today-on-ios-android-and-mac/. 
  14. Sawers, Paul (2 December 2014). "Wire wants to be Skype for the modern age, launches with the backing of Skype co-founder Janus Friis". VentureBeat. https://venturebeat.com/2014/12/02/wire-launches-as-a-skype-for-the-modern-age-with-the-backing-of-skype-co-founder-janus-friis/. 
  15. Lopez, Napier (30 July 2016). "Open-source Wire messenger gets encrypted screen-sharing". The Next Web. https://thenextweb.com/apps/2016/07/30/open-source-wire-messenger-gets-encrypted-screen-sharing/. 
  16. "Wire technology in your private cloud · Wire". https://wire.com/en/products/technology/. 
  17. "Guest rooms · Wire". https://wire.com/en/features/encrypted-guest-rooms/. 
  18. "Invite a guest with an existing Wire account to my team conversations". http://support.wire.com/hc/en-us/articles/115003862909. 
  19. "Safe and tidy with Timed Messages". Wire Swiss. 25 October 2016. https://medium.com/wire-news/safe-and-tidy-with-timed-messages%EF%B8%8F-4f26ff17b11b. 
  20. Mott, Nathaniel (25 October 2016). "Encrypted Messaging Apps Wire And Signal Turn To Ephemeral Messages". Purch Group Inc.. http://www.tomshardware.com/news/wire-signal-ephemeral-messages,32923.html. 
  21. "Wire Security Whitepaper". Wire Swiss GmbH. https://wire.com/resource/Wire%20Security%20Whitepaper/download/. 
  22. "Add attribution". Wire Swiss GmbH. 9 May 2016. https://github.com/wireapp/proteus/blob/develop/src/internal/session.rs#L2. 
  23. "Inside MLS, the New Protocol for Secure Enterprise Messaging". 27 June 2019. https://www.darkreading.com/perimeter/inside-mls-the-new-protocol-for-secure-enterprise-messaging/d/d-id/1335075. 
  24. wireapp. "wire-desktop/LICENSE at master · wireapp/wire-desktop · GitHub". Github.com. https://github.com/wireapp/wire-desktop/blob/master/LICENSE. 
  25. wireapp. "wire-ios/README.md at develop ¡ wireapp/wire-ios ¡ GitHub". Github.com. https://github.com/wireapp/wire-ios/blob/develop/README.md. 
  26. "Legal · Wire". Wire.com. https://wire.com/en/legal/. 
  27. Menge-Sonnentag, Rainald (27 July 2016). "Wire-Messenger ist jetzt vollständig Open Source" (in de). http://www.heise.de/developer/meldung/Wire-Messenger-ist-jetzt-vollstaendig-Open-Source-3277490.html. 
  28. "Wire iOS client". Wire Swiss GmbH. https://github.com/wireapp/wire-ios. 
  29. "Wire Swiss GmbH". https://github.com/wireapp. 
  30. https://www.x41-dsec.de/reports/X41-Kudelski-Wire-Security-Review-Web-Calling.pdf
  31. "Wire". 28 March 2016. https://crysp.uwaterloo.ca/opinion/wire/. 
  32. "A major upgrade to calling". Wire Swiss GmbH. 14 March 2017. https://medium.com/wire-news/a-major-upgrade-to-calling-9ac8780741a1#.5jt0cku16. 
  33. "Open sourcing Wire server code". Wire Swiss GmbH. 7 April 2017. https://medium.com/wire-news/open-sourcing-wire-server-code-ef7866a731d5. 
  34. Kudelski Security and X41 D-Sec (8 February 2017). "Security Review – Phase 1". X41 D-Sec. https://www.x41-dsec.de/reports/Kudelski-X41-Wire-Report-phase1-20170208.pdf. 
  35. "Wire's independent security review". Wire Swiss GmbH. 9 February 2017. https://medium.com/wire-news/wires-independent-security-review-61f37a1762a8. 
  36. "Key verification to secure your conversations · Wire". https://wire.com/en/blog/key-verification-secure-conversations/. 
  37. Cox, Joseph (12 May 2017). "Secure Messaging App Wire Stores Everyone You've Ever Contacted in Plain Text". Vice Media LLC. https://motherboard.vice.com/en_us/article/secure-messaging-app-wire-stores-everyone-youve-ever-contacted-in-plain-text. 
  38. "Wire Reviews 2020 - Capterra". https://www.capterra.com/p/170279/Wire/reviews/. 
  39. "2019 Winners | CyberSecurity Breakthrough Awards". https://cybersecuritybreakthrough.com/2019-winners/. 
  40. "Cybersecurity Excellence Awards". https://cybersecurity-excellence-awards.com/. 
  41. "2020 Cybersecurity Excellence Awards". February 6, 2019. https://cybersecurity-excellence-awards.com/2020-cybersecurity-excellence-awards/. 
  42. "StackPath". https://www.cyberdefensemagazine.com/. 
  43. "Cyber Defense Awards | The Most Prestigious Cybersecurity Awards in the World – 7 Years Running…". https://www.cyberdefenseawards.com. 
  44. Cox, Joseph (2017-05-12). "Secure Messaging App Wire Stores Everyone You've Ever Contacted in Plain Text" (in en). https://www.vice.com/en_us/article/gvzw5x/secure-messaging-app-wire-stores-everyone-youve-ever-contacted-in-plain-text. 
  45. "Cutting the Wire". 2019-12-06. https://www.thinkprivacy.ch/cutting-the-wire. 
  46. "Business Directory of Wire Group Holdings GMBH". https://www.dnb.com/business-directory/company-profiles.wire_group_holdings_gmbh.938a860894ae1d41e9c5ab69a8cb4c76.html. 
  47. Lomas, Natasha (20 July 2017). "Wire launches e2e encrypted team messaging in beta". Oath Inc.. https://techcrunch.com/2017/07/20/wire-launches-e2e-encrypted-team-messaging-in-beta/. 
  48. "Encrypted messaging app Wire is taking on Slack with its new business messenger platform | Verdict" (in en-GB). https://www.verdict.co.uk/wire-messaging-app/. 
  49. "Wire by EY brings secure messaging to accounting". May 16, 2019. https://www.verdict.co.uk/wire-by-ey-secure-messaging-accounting/. 
More
©Text is available under the terms and conditions of the Creative Commons-Attribution ShareAlike (CC BY-SA) license; additional terms may apply. By using this site, you agree to the Terms and Conditions and Privacy Policy.
This entry is offline, you can click here to edit this entry!
ScholarVision Creations
Feedback