From simonl@PartyGaming.com Fri Feb 1 14:21:08 2008 From: simonl@PartyGaming.com (Simon Loewenthal) Date: Fri, 1 Feb 2008 15:21:08 +0100 Subject: [OTR-users] OTR - conference rooms and key distribution Message-ID: <0B1B9163138571439EAF804646F3F6AA0397843A@GIBSVWIN004X.partygaming.local> This is a multi-part message in MIME format. ------=_NextPart_000_016C_01C864E6.119740C0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all, I use OTR with Pidgin (Gaim). I have a few questions because I would like to suggest OTR and Gaim (or another messenger) for use across a company. i) How can I use OTR in chat rooms or conferences? ii) Key distribution. Can keys be loaded into OTR from another source, such as a file? This way company keys can be distributed to all client computers with OTR instead of trusting the incoming key, which may not be legitimate. iia) Are there any servers that can distribute the keys either push or pull to the client messenger s/w that has OTR installed? ------=_NextPart_000_016C_01C864E6.119740C0 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExDjAMBggqhkiG9w0CBQUAMIAGCSqGSIb3DQEHAQAAoIII2jCC AmIwggHLoAMCAQICEDjSu1W5EBoCTbLgxbhbmRswDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UEBhMC WkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMTI1RoYXd0 ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA3MTExNjEwMzU1N1oXDTA4MTExNTEw MzU1N1owSDEfMB0GA1UEAxMWVGhhd3RlIEZyZWVtYWlsIE1lbWJlcjElMCMGCSqGSIb3DQEJARYW c2ltb25sQHBhcnR5Z2FtaW5nLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAy9VKyY9J zCdapsQIDs7TFjP+xl7WUhvzHifte+8euyhN6PuyKElgacb29HB7Ekf6a04N5pnId1bt1tkn+z5h HcZ0h6thVv7/ipGX+TPw9cKkWfRWVZiCebR7OnYjRocpolkLm4Cz+eYvXuCAryr7PzEtYB573pJ6 wvS8frUfIXUCAwEAAaMzMDEwIQYDVR0RBBowGIEWc2ltb25sQHBhcnR5Z2FtaW5nLmNvbTAMBgNV HRMBAf8EAjAAMA0GCSqGSIb3DQEBBQUAA4GBAFxGL5b4Qz6AUDqQaGY+HYUFq5OyKMulJkvKomOv BbFOSy86uQSpjqpX6n+F+GLUSoOqZYzYUGSMqkWi7ThOLGoGQOrALiIZbJhQTrhZvOpr5kYmcAfA O2eCQn9oZvDyYVfjJWZeqvaftcbzk8e0Zq0YNWKZcjvjFRE38fw9SyF9MIIDLTCCApagAwIBAgIB ADANBgkqhkiG9w0BAQQFADCB0TELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTES MBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMf Q2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFs IEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29t MB4XDTk2MDEwMTAwMDAwMFoXDTIwMTIzMTIzNTk1OVowgdExCzAJBgNVBAYTAlpBMRUwEwYDVQQI EwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENvbnN1 bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNVBAMT G1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwtZnJl ZW1haWxAdGhhd3RlLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA1GnX1LCUZFtx6UfY DFG26nKRsIRefS0Nj3sS34UldSh0OkIsYyeflXtL734Zhx2G6qPduc6WZBrCFG5ErHzmj+hND3Ef QDimAKOHePb5lIZererAXnbr2RSjXW56fAylS1V/Bhkpf56aJtVquzgkCGqYx7Hao5iR/Xnb5VrE HLkCAwEAAaMTMBEwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQQFAAOBgQDH7JJ+Tvj1lqVn Yiqk8E0RYNBvjWBYYawmu1I1XAjPMPuoSpaKH2JCI4wXD/S6ZJwXrEcp352YXtJsYHFcoqzceePn bgBHH7UNKOgCneSa/RP0ptl8sfjcXyMmCZGAc9AUG95DqYMl8uacLxXK/qarigd1iwzdUYRr5PjR zneigTCCAz8wggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUwEwYD VQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhhd3RlIENv bnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNpb24xJDAiBgNV BAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJARYccGVyc29uYWwt ZnJlZW1haWxAdGhhd3RlLmNvbTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3MTYyMzU5NTlaMGIxCzAJ BgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQD EyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQTCBnzANBgkqhkiG9w0BAQEFAAOB jQAwgYkCgYEAxKY8VXNV+065yplaHmjAdQRwnd/p/6Me7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDX AmNaLIkVcI7dyfArhVqqP3FWy688Cwfn8R+RNiQqE88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l 0cUqVIUPSAR/p7bRPGEEQB5kGXJgt/sCAwEAAaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMG A1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9jcmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVt YWlsQ0EuY3JsMAsGA1UdDwQEAwIBBjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxh YmVsMi0xMzgwDQYJKoZIhvcNAQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4 +DYfqi2fNi/A9BxQIJNwPP2t4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9l X5Xa9/eH1sYITq726jTlEBpbNU1341YheILcIRk13iSx0x1G/11fZU8xggL3MIIC8wIBATB2MGIx CzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYD VQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIQONK7VbkQGgJNsuDFuFuZ GzAMBggqhkiG9w0CBQUAoIIB1DAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJ BTEPFw0wODAyMDExNDIxMDhaMB8GCSqGSIb3DQEJBDESBBAB0grA0HwiiAZuvP7xhIgKMGcGCSqG SIb3DQEJDzFaMFgwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcG BSsOAwIHMA0GCCqGSIb3DQMCAgEoMAoGCCqGSIb3DQIFMAcGBSsOAwIaMIGFBgkrBgEEAYI3EAQx eDB2MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQu MSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIQONK7VbkQGgJN suDFuFuZGzCBhwYLKoZIhvcNAQkQAgsxeKB2MGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3 dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1h aWwgSXNzdWluZyBDQQIQONK7VbkQGgJNsuDFuFuZGzANBgkqhkiG9w0BAQEFAASBgCCeKRd5aVF2 ++EzrXx27RpDiT6NYra0HK9pBy2LzAgbYFeTLEjWEawxlvnkcVoDb91aDZ09O2H4iiZCehERX0HK 0hslXJPCCwQF3aiYxE+F2sXmh4SXvJX4P3b1zKPB6kI57Fv+pc5QZfS50boZ2MeKTdUI/NO3xZCH QRkrPixRAAAAAAAA ------=_NextPart_000_016C_01C864E6.119740C0-- From ian@cypherpunks.ca Fri Feb 1 21:39:49 2008 From: ian@cypherpunks.ca (Ian Goldberg) Date: Fri, 1 Feb 2008 16:39:49 -0500 Subject: [OTR-users] OTR and Pidgin Portable In-Reply-To: <010b01c86282$2c6869d0$7b7aa8c0@rentas.sibs.net> References: <010b01c86282$2c6869d0$7b7aa8c0@rentas.sibs.net> Message-ID: <20080201213949.GQ5797@yoink.cs.uwaterloo.ca> On Tue, Jan 29, 2008 at 12:21:00PM -0200, Adrian Ramirez wrote: > Hi OTR users. When I try to install pidgin-otr-3.1.0-1.exe, I receive the > message "Failed to find Pidgin installation" > > Im currently using WinXP and Pidgin Portable (its not installed, obviusly > :P) > > How can I install the plugin? > There are a distribution without installation executable, just the files? > > > Thanks and excuse my english please. > Adrian from Argentina. I seem to remember someone made a pidgin-otr-portable package just for this reason. Yes, it seems to be here: http://sourceforge.net/project/showfiles.php?group_id=151265&package_id=242093 - Ian From ian@cypherpunks.ca Fri Feb 1 21:43:22 2008 From: ian@cypherpunks.ca (Ian Goldberg) Date: Fri, 1 Feb 2008 16:43:22 -0500 Subject: [OTR-users] OTR - conference rooms and key distribution In-Reply-To: <0B1B9163138571439EAF804646F3F6AA0397843A@GIBSVWIN004X.partygaming.local> References: <0B1B9163138571439EAF804646F3F6AA0397843A@GIBSVWIN004X.partygaming.local> Message-ID: <20080201214322.GR5797@yoink.cs.uwaterloo.ca> On Fri, Feb 01, 2008 at 03:21:08PM +0100, Simon Loewenthal wrote: > Hi all, > > I use OTR with Pidgin (Gaim). I have a few questions because I > would like to suggest OTR and Gaim (or another messenger) for use across a > company. > > i) How can I use OTR in chat rooms or conferences? You can't (yet). Currently, OTR is just for two-person private conversations, but we're working on extending it. > ii) Key distribution. Can keys be loaded into OTR from another source, such > as a file? This way company keys can be distributed to all client computers > with OTR instead of trusting the incoming key, which may not be legitimate. There's no built-in tool for this, but the keys are stored in a simple text file that you can easily copy around or add lines to. (otr.fingerprints) > iia) Are there any servers that can distribute the keys either push or pull > to the client messenger s/w that has OTR installed? You'd of course have to have the file of keys signed by a trusted entity or something like that, if you're fetching it over the network. But it would work fine if you took care. - Ian From esurnir@gmail.com Wed Feb 6 20:56:39 2008 From: esurnir@gmail.com (Jean-Baptiste Zeller) Date: Wed, 06 Feb 2008 15:56:39 -0500 Subject: [OTR-users] Backing up your secret keys Message-ID: <47AA1F07.8030800@gmail.com> Hello :), I found two files called otr.private_key and otr.fingerprints. Would backing those file and pasting them once reinstalling off the record would do the trick to avoid to have to recheck new keys with everyone in my contact list ? Sorry if this question has already been asked, it's the first time I don't know how to search into the mailing list... - Jean-Baptiste From erecio@polywog.org Thu Feb 7 01:15:54 2008 From: erecio@polywog.org (E. M. Recio) Date: Wed, 06 Feb 2008 20:15:54 -0500 Subject: [OTR-users] Backing up your secret keys In-Reply-To: <47AA1F07.8030800@gmail.com> References: <47AA1F07.8030800@gmail.com> Message-ID: <47AA5BCA.8070701@polywog.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jean-Baptiste Zeller wrote: > I found two files called otr.private_key and otr.fingerprints. Would > backing those file and pasting them once reinstalling off the record > would do the trick to avoid to have to recheck new keys with everyone in > my contact list ? yep, that's how I sync'd it with my other workstations. - -e -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFHqlvKKoXvoXXmAZ0RAhpuAJ0U4xykqA962pBcw0SolQQ7q1RaSACdFFRZ GrOb/qrrBWpBzfknZ2KokCs= =ss2N -----END PGP SIGNATURE----- From brian.mathis@gmail.com Wed Feb 13 23:04:36 2008 From: brian.mathis@gmail.com (Brian Mathis) Date: Wed, 13 Feb 2008 18:04:36 -0500 Subject: [OTR-users] After installing, docs on exe files? Message-ID: <183c528b0802131504q23e51990y126268573a348040@mail.gmail.com> I noticed that after installing the otr plugin for pidgin on windows, there are a number of files in the program files\pidgin-otr folder. Are these files needed for regular operation of OTR? If not, what are they used for? I'm curious because I would like to add OTR to pidgin running from a usb drive (portable pidgin), and I'm not sure if only the pidgin-otr.dll file is needed, or are these other files also required. From adrian.ramirez@siemens.com.ar Thu Feb 14 11:08:35 2008 From: adrian.ramirez@siemens.com.ar (Adrian Ramirez) Date: Thu, 14 Feb 2008 09:08:35 -0200 Subject: Fw: [OTR-users] After installing, docs on exe files? Message-ID: <00e301c86ef9$f2d05230$7b7aa8c0@rentas.sibs.net> Brian, download Pidgin OTR Portable... Enjoy! Adrian. ----- Original Message ----- From: Leonardo To: Adrian Ramirez Sent: Thursday, January 31, 2008 3:21 PM Subject: Re: [OTR-users] OTR and Pidgin Portable You can get OTR for Pidgin Portable here: http://downloads.sourceforge.net/portableapps/Pidgin-OTR_Portable_3.1.paf.exe?download thanks to the folk over at http://portableapps.com/apps/internet/pidgin_portable That should work for you. Enjoy! On Tue, Jan 29, 2008 at 9:21 AM, Adrian Ramirez wrote: Hi OTR users. When I try to install pidgin-otr-3.1.0-1.exe, I receive the message "Failed to find Pidgin installation" Im currently using WinXP and Pidgin Portable (its not installed, obviusly :P) How can I install the plugin? There are a distribution without installation executable, just the files? Thanks and excuse my english please. Adrian from Argentina. From brian.mathis@gmail.com Fri Feb 15 05:39:22 2008 From: brian.mathis@gmail.com (Brian Mathis) Date: Fri, 15 Feb 2008 00:39:22 -0500 Subject: Fw: [OTR-users] After installing, docs on exe files? In-Reply-To: <00e301c86ef9$f2d05230$7b7aa8c0@rentas.sibs.net> References: <00e301c86ef9$f2d05230$7b7aa8c0@rentas.sibs.net> Message-ID: <183c528b0802142139q7176283fgf8837e813f949889@mail.gmail.com> Thanks for the pointers to portable pidgin, however I am aware of the project. It's what has spurred me into making my own, because while portableapps.com has some cool stuff, the updates don't keep up with official releases for many apps, and even then they are sporadic (they seem to coincide with holidays or when the author can "get around to it"). Portable pidgin in particular is quite a few releases out of date. I understand that resources can be an issue with a free project, so I'm not complaining, just making my own solution (which comes from the official pidgin site on how to make it portable). Anyway, as for the original question of what are those exe files for? Does anyone know? Thanks. On Thu, Feb 14, 2008 at 6:08 AM, Adrian Ramirez wrote: > > Brian, download Pidgin OTR Portable... > > Enjoy! > Adrian. > > ----- Original Message ----- > From: Leonardo > To: Adrian Ramirez > Sent: Thursday, January 31, 2008 3:21 PM > Subject: Re: [OTR-users] OTR and Pidgin Portable > > > You can get OTR for Pidgin Portable here: > http://downloads.sourceforge.net/portableapps/Pidgin-OTR_Portable_3.1.paf.exe?download > thanks to the folk over at > http://portableapps.com/apps/internet/pidgin_portable > > That should work for you. Enjoy! > > > On Tue, Jan 29, 2008 at 9:21 AM, Adrian Ramirez > wrote: > > Hi OTR users. When I try to install pidgin-otr-3.1.0-1.exe, I receive the > message "Failed to find Pidgin installation" > > Im currently using WinXP and Pidgin Portable (its not installed, obviusly > :P) > > How can I install the plugin? > There are a distribution without installation executable, just the files? > > > Thanks and excuse my english please. > Adrian from Argentina. > > > > > _______________________________________________ > OTR-users mailing list > OTR-users@lists.cypherpunks.ca > http://lists.cypherpunks.ca/mailman/listinfo/otr-users > From ian@cypherpunks.ca Thu Feb 21 00:58:49 2008 From: ian@cypherpunks.ca (Ian Goldberg) Date: Wed, 20 Feb 2008 19:58:49 -0500 Subject: Fw: [OTR-users] After installing, docs on exe files? In-Reply-To: <183c528b0802142139q7176283fgf8837e813f949889@mail.gmail.com> References: <00e301c86ef9$f2d05230$7b7aa8c0@rentas.sibs.net> <183c528b0802142139q7176283fgf8837e813f949889@mail.gmail.com> Message-ID: <20080221005849.GK6531@yoink.cs.uwaterloo.ca> On Fri, Feb 15, 2008 at 12:39:22AM -0500, Brian Mathis wrote: > Anyway, as for the original question of what are those exe files for? > Does anyone know? Are you talking about otr_parse, otr_readforge, etc.? Those are the OTR toolkit, which let you modify OTR transcripts while making all the cryptographic verification still work out correctly. The reason it's there is that we'd like to be able to say that pretty much everyone who has OTR also has a copy of this toolkit, so that if someone produces a transcript that purports that you said something or other, you can more easily claim that they just made up that transcript themselves. [Just like they'd be able to with a plaintext IM conversation.] - Ian From esurnir@gmail.com Thu Feb 28 16:42:01 2008 From: esurnir@gmail.com (Esurnir) Date: Thu, 28 Feb 2008 11:42:01 -0500 Subject: [OTR-users] Off the record package on the ubuntu server ? Message-ID: <78ce815d0802280842l31809a6ewd47bca603a710422@mail.gmail.com> ------=_Part_21_17448375.1204216921290 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hello, I was wondering would it be possible to update the package (still at 3.0 at the time I speak) on the ubuntu package distribution ? I tried to compile the 3.1 but due to the fact that gtk is labeled as being version 2.0 it became a true nightmare, never succeeded into finaly compiling the pidgin-otr plugin (libotr went fine). Thank you ------=_Part_21_17448375.1204216921290 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline Hello,

I was wondering would it be possible to update the package (still at 3.0 at the time I speak) on the ubuntu package distribution ?

I tried to compile the 3.1 but due to the fact that gtk is labeled as being version 2.0 it became a true nightmare, never succeeded into finaly compiling the pidgin-otr plugin (libotr went fine).

Thank you
------=_Part_21_17448375.1204216921290-- From tommy.b@gmx.net Thu Feb 28 17:12:09 2008 From: tommy.b@gmx.net (Thomas B.) Date: Thu, 28 Feb 2008 18:12:09 +0100 Subject: [OTR-users] Off the record package on the ubuntu server ? In-Reply-To: <78ce815d0802280842l31809a6ewd47bca603a710422@mail.gmail.com> References: <78ce815d0802280842l31809a6ewd47bca603a710422@mail.gmail.com> Message-ID: <20080228171209.GA32135@tommy-desktop> Hi! On Thu, Feb 28, 2008 at 11:42:01AM -0500, Esurnir wrote: > I was wondering would it be possible to update the package (still at 3.0 at the > time I speak) on the ubuntu package distribution ? pidgin-otr 3.1.0 will be in the next Ubuntu release: http://packages.ubuntu.com/hardy/pidgin-otr AFAIK the release of Hardy is scheduled for April. > I tried to compile the 3.1 but due to the fact that gtk is labeled as being > version 2.0 it became a true nightmare, never succeeded into finaly compiling > the pidgin-otr plugin (libotr went fine). Hm, I compiled pidgin-otr on Ubuntu without problems. Are you sure that you have all the dependencies installed (especially the required development packages)? You can do that with sudo apt-get build-dep pidgin-otr The only issue I encountered when compiling from source is that pidgin-otr gets installed to /usr/local by default, while the Pidgin binary provided by Ubuntu is installed in /usr. I solved that by adding "--prefix=/usr" to the configure options for pidgin-otr. Regards, Thomas