Security Analysis of SecureDrop Protocol Presented at IETF 124
Empowering journalists and whistleblowers to communicate safely.
SecureDrop is an open source whistleblower submission system installed
on-premises by news organizations around the world.
Featured Items
-
Five things to know about SecureDrop
Over the past month, Freedom of the Press Foundation has received significant interest in newsrooms setting up SecureDrop. Our open source whistleblower submission system is already used around the globe by large media organizations, small nonprofit newsrooms, and everything in between. We’re excited to see more adoption of SecureDrop.To …
-
The long and winding road to safe browser-based cryptography
What is the basis for trusting the code that performs browser-based encryption? To read more about a problem that is legally old enough for a learner’s permit in several U.S. states, read the full article here.
-
SecureDrop completes sixth security audit
SecureDrop has completed its sixth security audit, conducted by 7ASecurity and sponsored by the Open Technology Fund. The audit identified three vulnerabilities—one medium-severity and two low-severity—all of which were fixed in the SecureDrop 2.10.0 release. In their report, the auditors praised SecureDrop's robust defense against a broad range …
-
SecureDrop Workstation 1.0.0 Released
SecureDrop Workstation 1.0.0 has been released, offering significant security and usability enhancements for journalists. Key improvements include support for Qubes 4.2, automatic retries for downloads, and new media format compatibility. With these updates, the project transitions into an open beta, enabling more newsrooms to migrate to the next-generation user experience …
-
Introducing the SecureDrop Protocol
The SecureDrop team has introduced the SecureDrop Protocol, designed to enhance security for whistleblowers and journalists. In addition to providing end-to-end encryption, the new protocol eliminates the need for accounts, prevents message flow tracking, and limits the server’s ability to collect metadata. Built with robust cryptographic principles, it’s engineered for …
-
Join us for a SecureDrop hackathon at Aaron Swartz Day this weekend in San Francisco
Join us November 10 and 11 for a SecureDrop hackathon and a weekend full of talks, trainings, and privacy-preserving projects, in honor of computer scientist, activist, and friend Aaron Swartz.
-
First major study looks at how SecureDrop is used in newsrooms in North America
Today the Tow Center for Digital Journalism at Columbia Journalism School has published a first-of-its-kind study on how newsrooms are using SecureDrop, our open-source whistleblower submission system that is now in-use at over thirty news organizations worldwide.People often ask us: How effective is SecureDrop? Do sources use it? These …
-
Come hack on SecureDrop and celebrate the third annual Aaron Swartz Day
UPDATE: You can still participate in the Aaron Swartz SecureDrop hackathon even if you're not located in San Francisco! Just go to this Trello link and click on "Getting Started." -----on Saturday November 7th is the third annual Aaron Swartz Day, which celebrates the life of Aaron and …
-
Announcing the latest security audit of SecureDrop
Today we’re announcing SecureDrop 0.3.4, the latest release of SecureDrop, and publishing the results of the accompanying security audit by iSEC Partners. This is our fourth audit of SecureDrop and you can read the results of the previous three audits here.We are happy to report that this …
-
Announcing the new version of SecureDrop, with the results from our third security audit
Today, we’re announcing the latest major release of SecureDrop, our open-source whistleblower submission system. SecureDrop 0.3 uses the same basic architecture found in 0.2, but contains numerous improvements focused on better usability for both journalists and sources, a radically simplified installation process, and an auto-updating procedure that allows us to …
