Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://infosec.exchange/@xoron" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>xoron</span></a></span> I don't want to discourage you at all - in fact I think your goal is not just noble but also worth aspiring to.</p><ul><li>My recommendation is always to scout out existing solutions, protocols and standards and see if those can be salvaged / used and if not, reason why. <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PGP</span></a>/MIME may seem crusty but a good UI can make it easy. Same.goes for <a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OMEMO</span></a> & <a href="https://infosec.space/tags/OTR" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OTR</span></a>... </li></ul><p>But whatever you do, please <em>"DO NOT DIY ENCRYPTION!"</em> </p><ul><li>Instead delegate it to drop-in libraries (i.e. crypto++ for C++) that are well, maintained and getting audited.</li></ul><p>Prioritize features early on and make a decision what you want and if/how these can be accomplished. If necessary, have different modes / functions one has to context-switch (i.e. videocalling can't work in an airgapped network unless your callers are in the same (W)LAN).</p><ul><li>If possible choose to stay platform-independent in terms of tech, so like <a href="https://infosec.space/tags/WebCall" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WebCall</span></a>, <a href="https://infosec.space/tags/JitsiMeet" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>JitsiMeet</span></a>, etc. you can simply package that up with <a href="https://nwjs.io" rel="nofollow noopener" target="_blank">nw.js</a>... (Except if you need like a minimalist, (n)curses-style TUI tool like <a href="https://infosec.space/tags/enc" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>enc</span></a>)</li></ul><p>User-test early on. Espechally with <em>"<a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>TechIlliterates</span></a>"</em>, if you can.</p><ul><li>Focus on a <a href="https://infosec.space/tags/MVP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MVP</span></a> (<em>minimum viable product</em>) early on. </li></ul><p>Write <a href="https://infosec.space/tags/documentation" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>documentation</span></a> early on since that'll remove headaches. And I don't just mean <a href="https://infosec.space/tags/CommentYourCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CommentYourCode</span></a> but go deep and explain in detail <em>why</em> you chose something. This will help not just you.</p><ul><li>In terms of <em>"scouting existing solutions"</em> I'd recommend to take a look not just at <a href="https://infosec.space/tags/JitsiMeet" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>JitsiMeet</span></a> & <a href="https://infosec.space/tags/WebCall" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WebCall</span></a>, but also <a href="https://infosec.space/tags/Briar" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Briar</span></a>, <a href="https://infosec.space/tags/ServalMesh" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ServalMesh</span></a>, <span class="h-card" translate="no"><a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>monocles</span></a></span> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>monoclesChat</span></a>, <span class="h-card" translate="no"><a href="https://fosstodon.org/@gajim" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>gajim</span></a></span> / <a href="https://infosec.space/tags/gajim" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>gajim</span></a> and <span class="h-card" translate="no"><a href="https://infosec.exchange/@micahflee" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>micahflee</span></a></span>'s <a href="https://infosec.space/tags/OnionShare" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OnionShare</span></a>. </li></ul><p>Make yourself a list what you like and dislike from those. </p><ul><li>Same with <a href="https://infosec.space/tags/Linphone" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Linphone</span></a>, <span class="h-card" translate="no"><a href="https://fosstodon.org/@zulip" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>zulip</span></a></span> / <a href="https://infosec.space/tags/Zulip" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Zulip</span></a>, <a href="https://infosec.space/tags/WhatsApp" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WhatsApp</span></a>, <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Signal</span></a>, <a href="https://infosec.space/tags/Threema" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Threema</span></a> and even <a href="https://infosec.space/tags/WeChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WeChat</span></a>, <a href="https://infosec.space/tags/FacebookMessenger" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FacebookMessenger</span></a>, <a href="https://infosec.space/tags/iMessage" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>iMessage</span></a>, <a href="https://infosec.space/tags/FaceTime" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FaceTime</span></a> and god forbid <a href="https://infosec.space/tags/Skype" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Skype</span></a>, <a href="https://infosec.space/tags/MicrosoftTeams" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>MicrosoftTeams</span></a> as well as <a href="https://infosec.space/tags/Slack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Slack</span></a>.</li></ul><p>Don't be afraid if your <a href="https://infosec.space/tags/App" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>App</span></a> can't tick all the boxes at first release. Rather feel free to slowly ibtegrate them.</p> <p>Needless to say I do sincerely wish you good luck and only the best in terms of success.</p>