"Secure Messaging: The Guardian’s Whistleblowing System"
summary
The Guardian ships an app-integrated anonymous whistleblowing system (Coverdrop) with a Rust backend, an on‑prem cover node that strips cover traffic, AWS Kinesis for queues, and SQLite+SQLCipher for storage; cryptography uses libSodium + x25519/ed25519 and a signed key hierarchy enforced by a Rust type-state for keys so wrong keys won’t compile. Production handles 5 million cover messages/day, uses testcontainers, time‑travel tests, and an hourly message canary for end‑to‑end observability.
AI-written summary · about
chapters (11)
- 0:00Introduction to Secure Messaging
- 2:49How Secure Messaging works
- 6:42System architecture overview
- 8:08Why Rust for security
- 11:44Rust implementation approach
- 13:48Type system for misuse resistance
- 17:17Cryptographic key hierarchy
- 22:08Testing and observability
- 30:50Monitoring message delivery
- 34:08Launch and future plans
- 37:39Q&A and closing remarks
related talks
50mBuilding Production-Grade End to End Encrypted App...
47mSecure messaging - how to protect yourself & your company
18mPrivacy - the new fame?
01h 07mBuilding Rock-Solid Encrypted Applications
19mBuilding private products
48mSecurity and compliance for container-based microservices
19mPrivate Communication, Human Agency, and Trust
43mSecuring Journalists