[OTR-users] Pidgin Plugin should ignore XMPP Resource for verification

Ian Goldberg ian at cypherpunks.ca
Mon Sep 13 21:32:19 EDT 2010


On Mon, Sep 13, 2010 at 12:43:34PM +0100, Brian Morrison wrote:
> On Mon, 13 Sep 2010 14:00:28 +0300
> Lachezar Dobrev <l.dobrev at gmail.com> wrote:
> 
> >   Currently when changing resource on the same account I have to
> > verify fingerprints for my contacts again, even though they have the
> > same fingerprint and account, which seems extraneous, and frankly
> > raises a false-positive alarm for eavesdropping.
> 
> Well, it draws your attention to the change, and perhaps makes you
> question whether it's genuinely the same person you're talking to....

I would expect different resources to have different keys as well,
unless they've manually copied around their private key file?

   - Ian



More information about the OTR-users mailing list