[pkg-otr-team] Bug#818313: Bug#818313: Bug#818313: off-the-record (OTR) plugin actually logs conversations

Antoine Beaupré anarcat at debian.org
Wed Mar 16 15:46:05 UTC 2016


On 2016-03-16 11:37:51, micah wrote:
>> Yes. In fact, I think it compromises the "encryption", "PFS" and
>> "deniability" aspects of the protocol, to be more specific.
>
> It doesn't cryptographically.
>
> You cannot take an OTR conversation that has been logged through an
> external means and prove cryptographically that this conversation
> actually happened.

I stand corrected on the "deniability" aspect, but the PFS and
encryption aspects still stand, and they are, in my opinion, critical.

A.

-- 
Imagine a world in which every single person on the planet is given
free access to the sum of all human knowledge.
                         - Jimmy Wales, co-founder of Wikipedia



More information about the Pkg-otr-team mailing list