22== Parley: Building on the sample
33
44Parley is a messenger, and most of what makes one isn't in the server. The
5- server stores and relays envelopes it can't open; the keys, the sessions, the
5+ server stores and relays ciphertext it can't open; the keys, the sessions, the
66encryption and the history are in the app. Parley kept what it shares with
77<<wayline-implementors-guide,Wayline>> and <<savor-implementors-guide,Savor>>: the
88module layout, the accounts and sign-in, text messages, push notifications, the
@@ -188,8 +188,8 @@ the user's guide says so.
188188=== Calls
189189
190190A call is two apps and a relay. The server never touches the media: it rings the
191- callee, relays the signalling, and hands out the addresses of the servers the apps
192- use to reach each other. The media itself is WebRTC's, encrypted with DTLS-SRTP
191+ callee, relays the signalling, and hands out the addresses of the servers through which
192+ the apps reach each other. The media itself is WebRTC's, encrypted with DTLS-SRTP
193193between the two devices.
194194
195195The app owns the signalling, which is how `com.codename1.webrtc` is meant to be used
@@ -247,8 +247,8 @@ include::../demos/common/src/main/snippets/developer-guide/parley.sh[tag=parley-
247247
248248`parley.ice.secret` is the secret shared with the TURN server -- coturn's
249249`static-auth-secret`, with `use-auth-secret` on. `Calls.ice` builds the credential
250- the way coturn checks it: the user name is the expiry time and the account, and the
251- password is the HMAC-SHA1 of the user name under the secret. Nothing is stored, and
250+ the way coturn checks it: the username is the expiry time and the account, and the
251+ password is the HMAC-SHA1 of the username under the secret. Nothing is stored, and
252252a leaked credential stops working on its own after `parley.ice.ttl` seconds. With
253253no TURN server set, only STUN is handed out, and calls between networks that block
254254a direct path fail. The default STUN server is a public one; run your own for a
@@ -275,7 +275,7 @@ include::../demos/common/src/main/snippets/developer-guide/parley.sh[tag=parley-
275275 `/bridge/whatsapp`, answers the verify token when subscribing, and signs every
276276 delivery with the app secret, which the server checks.
277277
278- image::img/parley-bot-chat.png["A chat with the demo bot under a banner that says its messages are not end-to-end encrypted",scaledwidth=40%]
278+ image::img/parley-bot-chat.png["A chat with the demo bot under a banner that says its messages aren't end-to-end encrypted",scaledwidth=40%]
279279
280280==== The privacy trade-off
281281
0 commit comments