From gmaxwell at gmail.com Thu Sep 10 17:41:15 2009 From: gmaxwell at gmail.com (Gregory Maxwell) Date: Thu, 10 Sep 2009 17:41:15 -0400 Subject: [OTR-users] Support for Telepathy/Empathy In-Reply-To: <20080903141349.GJ28608@thunk.cs.uwaterloo.ca> References: <20080903141349.GJ28608@thunk.cs.uwaterloo.ca> Message-ID: On Wed, Sep 3, 2008 at 10:13 AM, Ian Goldberg wrote: > On Wed, Sep 03, 2008 at 02:10:40AM +0200, Hajo E. wrote: >> Hello, >> I would like to ask if there are any plans or thoughts of implementing OTR >> into Telepathy [1]. A ticket [2] in the freedesktop bugzilla about this >> alreday exists. > > We (the core OTR dev team) work on the library, and we can give > assistance to people using the library to add OTR support to their IM > applications. ?But we don't have the resources to do the application > support ourselves, unfortunately. > > Someone from the Telepathy team would need to take the lead on this. FYI? The next revision of Fedora is pushing users to Empathy rather than pidgin. I believe ubuntu is doing this as well. The Empathy developers describe OTR as "Broken by design" because it is not protocol integrated and mock the people who request it: http://resiak.livejournal.com/60614.html So it seems that OTR support is never going to happen there. I'm pretty disappointed: Today 100% of my IM contacts have OTR (primarily Mac users using Adium), and this required very little prodding from me. Soon this won't be true any more and I think thats really unfortunate. From perrin at apotheon.com Thu Sep 10 19:24:36 2009 From: perrin at apotheon.com (Chad Perrin) Date: Thu, 10 Sep 2009 17:24:36 -0600 Subject: [OTR-users] OTR support in CenterIM Message-ID: <20090910232436.GA21716@kokopelli.hydra> The OTR site still lists CenterIM as an "OTR-aware" application, and as far as I've been able to determine it still doesn't support OTR. A couple years ago someone came up with a Jabber OTR patch for it, but it wasn't accepted because of some of the changes it made to the system. Even if it had been accepted into the CenterIM project, though, it would only have provided OTR support for a single Jabber account, total. Am I missing some later announcement of OTR support being added to CenterIM, or is the inclusion of CenterIM amongst the "OTR-aware" applications erroneous? -- Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ] Quoth Henry Spencer: "Those who don't understand Unix are doomed to reinvent it, poorly." -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 196 bytes Desc: not available URL: From paul at cypherpunks.ca Fri Sep 11 20:03:50 2009 From: paul at cypherpunks.ca (Paul Wouters) Date: Fri, 11 Sep 2009 20:03:50 -0400 (EDT) Subject: [OTR-users] Support for Telepathy/Empathy In-Reply-To: References: <20080903141349.GJ28608@thunk.cs.uwaterloo.ca> Message-ID: On Thu, 10 Sep 2009, Gregory Maxwell wrote: >> Someone from the Telepathy team would need to take the lead on this. > > FYI? The next revision of Fedora is pushing users to Empathy rather > than pidgin. I believe ubuntu is doing this as well. > > The Empathy developers describe OTR as "Broken by design" because it > is not protocol integrated and mock the people who request it: > http://resiak.livejournal.com/60614.html So it seems that OTR support > is never going to happen there. Yes, they even personally blew an approved Google Summer of Code project for OTR with Telepathy/Empathy out of the water. They basically only do jabber and ssl, and have absolutely no clue whatsoever what it means to have secure communication without digital signatures and plausible deniability. The whole point with OTR is being protocol-agnostic. It's not something they can think about. They're too deep down in their RFC's and jabber code to realise jabber is about 1% of the IM community out there in real life, and so a "protocol hack" like OTR is the only thing that is going to work to talk to your real life friends and family that are not CS PHD students. There are many people who will never use their software. Not just because of OTR, but also because they seem to think that they can convince everyone to move away from MSN and AIM and Skype and Facebook IM, and join the Jabber revolution. Their support for non-jabber is very minimalistic. They do not listen or respect to the requirements of the community and therefor have marginalised themselves. I have no hope that Telepathy will ever get a serious userbase, even if Fedora was so stupid as to make it their default IM client. There. I feel much better now. Paul From ian at cypherpunks.ca Fri Sep 11 21:08:34 2009 From: ian at cypherpunks.ca (Ian Goldberg) Date: Fri, 11 Sep 2009 21:08:34 -0400 Subject: [OTR-users] OTR support in CenterIM In-Reply-To: <20090910232436.GA21716@kokopelli.hydra> References: <20090910232436.GA21716@kokopelli.hydra> Message-ID: <20090912010834.GC11793@yoink.cs.uwaterloo.ca> On Thu, Sep 10, 2009 at 05:24:36PM -0600, Chad Perrin wrote: > The OTR site still lists CenterIM as an "OTR-aware" application, and as > far as I've been able to determine it still doesn't support OTR. A > couple years ago someone came up with a Jabber OTR patch for it, but it > wasn't accepted because of some of the changes it made to the system. > Even if it had been accepted into the CenterIM project, though, it would > only have provided OTR support for a single Jabber account, total. > > Am I missing some later announcement of OTR support being added to > CenterIM, or is the inclusion of CenterIM amongst the "OTR-aware" > applications erroneous? It may be. Can anyone else corroborate one way or the other? I'd like to correct the web page if it's wrong. Thanks, - Ian From junk at chassit.com Fri Sep 11 23:05:47 2009 From: junk at chassit.com (Tree) Date: Fri, 11 Sep 2009 23:05:47 -0400 (EDT) Subject: [OTR-users] OTR support in CenterIM In-Reply-To: <20090912010834.GC11793@yoink.cs.uwaterloo.ca> References: <20090910232436.GA21716@kokopelli.hydra> <20090912010834.GC11793@yoink.cs.uwaterloo.ca> Message-ID: On Fri, 11 Sep 2009, Ian Goldberg wrote: >> Am I missing some later announcement of OTR support being added to >> CenterIM, or is the inclusion of CenterIM amongst the "OTR-aware" >> applications erroneous? > > It may be. Can anyone else corroborate one way or the other? I'd like > to correct the web page if it's wrong. centerim supports OTR for jabber only, and it must be configured with a flag to enable it. It would be relatively easy to add OTR support for more protocols in centerim. I've prototyped it for AIM in the past, and it worked, but wasn't stable. My C++ skills are too rusty. :( -Tree From perrin at apotheon.com Sat Sep 12 00:40:04 2009 From: perrin at apotheon.com (Chad Perrin) Date: Fri, 11 Sep 2009 22:40:04 -0600 Subject: [OTR-users] OTR support in CenterIM In-Reply-To: References: <20090910232436.GA21716@kokopelli.hydra> <20090912010834.GC11793@yoink.cs.uwaterloo.ca> Message-ID: <20090912044004.GB27091@kokopelli.hydra> On Fri, Sep 11, 2009 at 11:05:47PM -0400, Tree wrote: > > It would be relatively easy to add OTR support for more protocols in > centerim. I've prototyped it for AIM in the past, and it worked, but > wasn't stable. My C++ skills are too rusty. :( My C++ skills are probably worse, else I probably would have added OTR support to CenterIM myself by now. Since I don't foresee getting the opportunity to brush up on C++ enough to do so any time soon, I rather hope someone else does so. -- Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ] Quoth Albert Camus: "An intellectual is someone whose mind watches itself." -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 196 bytes Desc: not available URL: From ananda.samaddar at vfemail.net Sat Sep 12 11:19:29 2009 From: ananda.samaddar at vfemail.net (Ananda Samaddar) Date: Sat, 12 Sep 2009 16:19:29 +0100 Subject: [OTR-users] Support for Telepathy/Empathy In-Reply-To: References: <20080903141349.GJ28608@thunk.cs.uwaterloo.ca> Message-ID: <4AABBC01.8010309@vfemail.net> Paul Wouters wrote: > The whole point with OTR is being protocol-agnostic. It's not something > they can think about. They're too deep down in their RFC's and jabber code > to realise jabber is about 1% of the IM community out there in real life, > and so a "protocol hack" like OTR is the only thing that is going to work > to talk to your real life friends and family that are not CS PHD students. You're forgetting all the Gmail users who'll also have a Google Talk account. Gtalk uses Jabber, but most people should already know that > I have no hope that Telepathy will ever get a serious userbase, even if > Fedora was so stupid as to make it their default IM client. You're referring to Empathy which uses Telepathy as its backend. Both Fedora and Ubuntu are switching to using Empathy as the default IM client, so the situation is much worse than you imagined. Ananda From perrin at apotheon.com Sun Sep 13 00:22:32 2009 From: perrin at apotheon.com (Chad Perrin) Date: Sat, 12 Sep 2009 22:22:32 -0600 Subject: [OTR-users] Support for Telepathy/Empathy In-Reply-To: <4AABBC01.8010309@vfemail.net> References: <20080903141349.GJ28608@thunk.cs.uwaterloo.ca> <4AABBC01.8010309@vfemail.net> Message-ID: <20090913042232.GA32126@kokopelli.hydra> On Sat, Sep 12, 2009 at 04:19:29PM +0100, Ananda Samaddar wrote: > Paul Wouters wrote: > > >The whole point with OTR is being protocol-agnostic. It's not something > >they can think about. They're too deep down in their RFC's and jabber code > >to realise jabber is about 1% of the IM community out there in real life, > >and so a "protocol hack" like OTR is the only thing that is going to work > >to talk to your real life friends and family that are not CS PHD students. > > You're forgetting all the Gmail users who'll also have a Google Talk > account. Gtalk uses Jabber, but most people should already know that Most of them use the Web interface, though. -- Chad Perrin [ original content licensed OWL: http://owl.apotheon.org ] Quoth McCloctnick the Lucid: "The first rule of magic is simple. Don't waste your time waving your hands and hopping when a rock or a club will do." -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 196 bytes Desc: not available URL: From casmls at gmail.com Mon Sep 14 13:13:12 2009 From: casmls at gmail.com (Christoph A.) Date: Mon, 14 Sep 2009 19:13:12 +0200 Subject: [OTR-users] OTR and psi+ Message-ID: <4AAE79A8.2080901@gmail.com> Hi, are you aware of any plugin/patch or proxy for psi+ (v0.14) to add OTR support? The patch for psi v0.13: http://public.tfh-berlin.de/~s30935/ does not seam to apply. thanks, Christoph -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 163 bytes Desc: OpenPGP digital signature URL: From ian at cypherpunks.ca Mon Sep 14 14:56:50 2009 From: ian at cypherpunks.ca (Ian Goldberg) Date: Mon, 14 Sep 2009 14:56:50 -0400 Subject: [OTR-users] OTR and psi+ In-Reply-To: <4AAE79A8.2080901@gmail.com> References: <4AAE79A8.2080901@gmail.com> Message-ID: <20090914185650.GP27913@thunk.cs.uwaterloo.ca> On Mon, Sep 14, 2009 at 07:13:12PM +0200, Christoph A. wrote: > Hi, > > are you aware of any plugin/patch or proxy for psi+ (v0.14) to add OTR > support? > The patch for psi v0.13: > http://public.tfh-berlin.de/~s30935/ > > does not seam to apply. This is the first I've heard of Psi+. You'd have to ask the author of the Psi OTR plugin (the web page you linked to, above), I suppose. - Ian From casmls at gmail.com Mon Sep 14 17:44:50 2009 From: casmls at gmail.com (Christoph A.) Date: Mon, 14 Sep 2009 23:44:50 +0200 Subject: [OTR-users] OTR and psi+ In-Reply-To: <20090914185650.GP27913@thunk.cs.uwaterloo.ca> References: <4AAE79A8.2080901@gmail.com> <20090914185650.GP27913@thunk.cs.uwaterloo.ca> Message-ID: <4AAEB952.9080108@gmail.com> Thank you for your reply. On 14.09.2009 20:56, Ian Goldberg wrote: > This is the first I've heard of Psi+. This client is also new for me. I'm seeking support for a friend to reach a high coverage. > You'd have to ask the author of > the Psi OTR plugin (the web page you linked to, above), I suppose. I did so. I will let you know if there is a possiblity for Psi+ or if this client should be avoided ;) best regards, Christoph -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 163 bytes Desc: OpenPGP digital signature URL: From js-otrim at webkeks.org Tue Sep 15 10:38:13 2009 From: js-otrim at webkeks.org (Jonathan Schleifer) Date: Tue, 15 Sep 2009 16:38:13 +0200 Subject: [OTR-users] Support for Telepathy/Empathy In-Reply-To: References: <20080903141349.GJ28608@thunk.cs.uwaterloo.ca> Message-ID: <20090915163813.5475c6a5@asgard> Am 10.09.2009 um 23:41 schrieb Gregory Maxwell: > http://resiak.livejournal.com/60614.html Maybe you should have a look at the date if the article itself wasn't obvious enough ;). -- Jonathan -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: not available URL: From js-otrim at webkeks.org Tue Sep 15 10:38:51 2009 From: js-otrim at webkeks.org (Jonathan Schleifer) Date: Tue, 15 Sep 2009 16:38:51 +0200 Subject: [OTR-users] Support for Telepathy/Empathy In-Reply-To: References: <20080903141349.GJ28608@thunk.cs.uwaterloo.ca> Message-ID: <20090915163851.4b510c30@asgard> Paul Wouters wrote: > They > basically only do jabber and ssl, and have absolutely no clue > whatsoever what it means to have secure communication without digital > signatures and plausible deniability. I guess they are planning to implement XTLS which is the Jabber-equivalent to OTR, but done without hacks. > The whole point with OTR is being protocol-agnostic. It's not > something they can think about. They're too deep down in their RFC's > and jabber code to realise jabber is about 1% of the IM community out > there in real life, and so a "protocol hack" like OTR is the only > thing that is going to work to talk to your real life friends and > family that are not CS PHD students. Yeah, like non CS PHD students care about cryptography ;). I guess more users care about using Jabber than about using cryptography for their instant messages. Let's face it: OTR is designed for legacy networks, this is why it doesn't get much love from the Jabber community. And honestly, it really is a PITA for Jabber, as it does things like HTML messages in the body whereas there is XHTML-IM for that. -- Jonathan -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 801 bytes Desc: not available URL: From mike at jadoti.com Fri Sep 18 13:38:56 2009 From: mike at jadoti.com (Mike) Date: Fri, 18 Sep 2009 12:38:56 -0500 Subject: [OTR-users] OTR on iPhone Message-ID: <56471b1e0909181038xa41bf81x487692d097441efd@mail.gmail.com> Hey all, I'm new to the list, so I apologize if this has been asked before, but I did a cursory scan through the archives and didn't see anything... Is there an iPhone client that supports OTR? If not, has anyone taken on this task? Thanks, Mike -------------- next part -------------- An HTML attachment was scrubbed... URL: From ian at cypherpunks.ca Fri Sep 18 14:25:32 2009 From: ian at cypherpunks.ca (Ian Goldberg) Date: Fri, 18 Sep 2009 14:25:32 -0400 Subject: [OTR-users] OTR on iPhone In-Reply-To: <56471b1e0909181038xa41bf81x487692d097441efd@mail.gmail.com> References: <56471b1e0909181038xa41bf81x487692d097441efd@mail.gmail.com> Message-ID: <20090918182532.GI26140@thunk.cs.uwaterloo.ca> On Fri, Sep 18, 2009 at 12:38:56PM -0500, Mike wrote: > Hey all, > > I'm new to the list, so I apologize if this has been asked before, but I did > a cursory scan through the archives and didn't see anything... > > Is there an iPhone client that supports OTR? > > If not, has anyone taken on this task? I don't know of one. BlackBerry and Android OTR clients should show up not too long after our Java OTR library hits the streets (Soon! We promise!), but I don't know about iPhone. - Ian From breaux at users.sourceforge.net Tue Sep 22 11:42:30 2009 From: breaux at users.sourceforge.net (Doug Breaux) Date: Tue, 22 Sep 2009 10:42:30 -0500 Subject: [OTR-users] Dropped large messages with Pidgin 2.5.5, OTR plugin, and Yahoo In-Reply-To: <49C2569C.4060101@users.sourceforge.net> References: <49C16F76.10206@users.sourceforge.net> <20090318221200.GT28398@yoink.cs.uwaterloo.ca> <49C2569C.4060101@users.sourceforge.net> Message-ID: <4AB8F066.1000207@users.sourceforge.net> Doug Breaux wrote: > Ian Goldberg wrote: > >> On Wed, Mar 18, 2009 at 05:02:30PM -0500, Doug Breaux wrote: >> >> >>> I'm not sure when this started, but I did recently upgrade my Pidgin >>> to 2.5.5 and I know that now if I send large messages encrypted with >>> OTR over Yahoo (problem seemed to not occur over GTalk), they are >>> dropped silently. >>> >>> I used to at least see a string of error messages when this kind of >>> defect existed, but now neither I nor the recipient receive any >>> indication at all. (Me that there was a problem or him that any >>> message was sent.) >>> >>> >> Weird. It sounds like the max message size of the Yahoo protocol has >> gotten smaller (or maybe pidgin 2.5.5 adds more overhead?). >> >> You can try this: >> >> In your pidgin/purple directory (the same directory your >> otr.private_keys file is in), make a text file called >> otr.max_message_size and put this line in it: >> >> prpl-yahoo 800 >> >> that's a tab between the protocol name and the number. >> >> See if that works. Try slightly smaller numbers if it doesn't. [The >> default for yahoo is 832.] >> >> Please report back if making this number smaller fixes things. (Or if >> it doesn't, I guess.) >> >> Thanks, >> >> - Ian >> > Ok, thanks for at least something to try. I'll have to wait until my > "test partner" is back from vacation, but we'll try to > see if we can find the limit. > > Doug > FYI, Still happening in Pidgin 2.6.2, still only with Yahoo and OTR. I've got a repeatable testcase now (first 2 paragraphs from the Pidgin Wikipedia article), so I'm able to try some things. I created the otr.max_message_size file with a value of 750 for prpl-yahoo in C:\Documents and Settings\\Application Data\.purple (with a tab between the values), restarted Pidgin, and it still failed. Should I keep trying smaller? I also happen to have the debug version of Pidgin installed right now due to another problem, if that helps. Note that on some send attempts, which I haven't yet seen a pattern for, I receive an error message, "(10:32:07 AM) *Unable to send message: The message is too large.*" But subsequent attempts report no error at all, they just don't deliver it. From ian at cypherpunks.ca Fri Sep 25 08:54:31 2009 From: ian at cypherpunks.ca (Ian Goldberg) Date: Fri, 25 Sep 2009 08:54:31 -0400 Subject: [OTR-users] Dropped large messages with Pidgin 2.5.5, OTR plugin, and Yahoo In-Reply-To: <4AB8F066.1000207@users.sourceforge.net> References: <49C16F76.10206@users.sourceforge.net> <20090318221200.GT28398@yoink.cs.uwaterloo.ca> <49C2569C.4060101@users.sourceforge.net> <4AB8F066.1000207@users.sourceforge.net> Message-ID: <20090925125431.GD21817@thunk.cs.uwaterloo.ca> On Tue, Sep 22, 2009 at 10:42:30AM -0500, Doug Breaux wrote: > FYI, Still happening in Pidgin 2.6.2, still only with Yahoo and OTR. > I've got a repeatable testcase now (first 2 paragraphs from the Pidgin > Wikipedia article), so I'm able to try some things. > > I created the otr.max_message_size file with a value of 750 for > prpl-yahoo in C:\Documents and Settings\\Application Data\.purple > (with a tab between the values), restarted Pidgin, and it still failed. > Should I keep trying smaller? I also happen to have the debug version of > Pidgin installed right now due to another problem, if that helps. > > Note that on some send attempts, which I haven't yet seen a pattern for, > I receive an error message, "(10:32:07 AM) *Unable to send message: The > message is too large.*" But subsequent attempts report no error at all, > they just don't deliver it. Yes, try smaller values, if you don't mind. Thanks, - Ian From paul at cypherpunks.ca Tue Sep 29 18:25:10 2009 From: paul at cypherpunks.ca (Paul Wouters) Date: Tue, 29 Sep 2009 18:25:10 -0400 (EDT) Subject: [OTR-users] otr4j: OTR java library Message-ID: FYI, http://code.google.com/p/otr4j/ http://otr4sipcomm.blogspot.com/ otr4j is an implementation of the OTR (Off The Record) protocol in java. Paul From paul at xelerance.com Tue Sep 29 18:28:13 2009 From: paul at xelerance.com (Paul Wouters) Date: Tue, 29 Sep 2009 18:28:13 -0400 (EDT) Subject: [OTR-users] otr4j: OTR java library In-Reply-To: References: Message-ID: On Tue, 29 Sep 2009, Paul Wouters wrote: > http://code.google.com/p/otr4j/ > http://otr4sipcomm.blogspot.com/ > > otr4j is an implementation of the OTR (Off The Record) protocol in java. I should have added: http://google-opensource.blogspot.com/2009/09/sip-communicators-summer-of-code.html George Politis from Greece worked on extending SIP Communicator with Off The Record (OTR) message encryption. OTR provides encryption, authentication, deniability, and strong forward secrecy. Until now SIP Communicator did not have any text message encryption and our chats were often unprotected. George started with the implementation of our own Open Source native java OTR library, which can also be used in other projects. George also implemented all the message transformation functionalities and the GUI necessary for us to integrate OTR support in SIP Communicator. It is already implemented in many of the other popular instant messengers such as Kopete, Pidgin, Adium, mICQ, Miranda, and Trillian. SIP Communicator is now able to carry out encrypted communications with other SIP Communicator clients and the aforementioned messengers. George's implementation has already been integrated in our source trunk and George has achieved committer status for SIP Communicator with a strong approval of our community. From ian at cypherpunks.ca Tue Sep 29 19:09:39 2009 From: ian at cypherpunks.ca (Ian Goldberg) Date: Tue, 29 Sep 2009 19:09:39 -0400 Subject: [OTR-users] otr4j: OTR java library In-Reply-To: References: Message-ID: <20090929230939.GI31666@yoink.cs.uwaterloo.ca> On Tue, Sep 29, 2009 at 06:28:13PM -0400, Paul Wouters wrote: > On Tue, 29 Sep 2009, Paul Wouters wrote: > >> http://code.google.com/p/otr4j/ >> http://otr4sipcomm.blogspot.com/ >> >> otr4j is an implementation of the OTR (Off The Record) protocol in java. > > I should have added: http://google-opensource.blogspot.com/2009/09/sip-communicators-summer-of-code.html > > George Politis from Greece worked on extending SIP Communicator with > Off The Record (OTR) message encryption. OTR provides encryption, > authentication, deniability, and strong forward secrecy. Until now > SIP Communicator did not have any text message encryption and our > chats were often unprotected. George started with the implementation > of our own Open Source native java OTR library, which can also > be used in other projects. George also implemented all the message > transformation functionalities and the GUI necessary for us to integrate > OTR support in SIP Communicator. It is already implemented in many of > the other popular instant messengers such as Kopete, Pidgin, Adium, > mICQ, Miranda, and Trillian. SIP Communicator is now able to carry out > encrypted communications with other SIP Communicator clients and the > aforementioned messengers. > > George's implementation has already been integrated in our source trunk > and George has achieved committer status for SIP Communicator with a > strong approval of our community. Sounds great! FYI: our own Java version just today entered "package it for release" status. So probably tomorrow, but if not, Friday. Watch this space. - Ian From alex-lg at mail.ru Wed Sep 30 02:30:09 2009 From: alex-lg at mail.ru (Alex LG) Date: Wed, 30 Sep 2009 10:30:09 +0400 Subject: [OTR-users] =?koi8-r?b?SXMgdGhlcmUgYW55IHNvbHV0aW9uIGZvciBXaW5N?= =?koi8-r?b?b2JpbGUgb3IgU2ltYmlhbj8=?= Message-ID: subj