<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Didier Frick schrieb:
<blockquote cite="mid1147025022.8620.6.camel@localhost.localdomain"
type="cite">
<pre wrap="">Le dimanche 07 mai 2006 à 19:51 +0200, Moritz 'Morty' Strübe a écrit :
[...]</pre>
<blockquote type="cite">
<pre wrap="">Off-the-Record (OTR) Messaging allows you to have private
conversations over instant messaging by providing:
Encryption
No one else can read your instant messages.
Authentication
You are assured the correspondent is who you think it is.
Deniability
The messages you send do not have digital signatures that are
checkable by a third party. Anyone can forge messages after a
conversation to make them look like they came from you.
However, during a conversation, your correspondent is assured
the messages he sees are authentic and unmodified.
Perfect forward secrecy
If you lose control of your private keys, no previous
conversation is compromised.
</pre>
</blockquote>
<pre wrap=""><!---->
If there is any kind of logging occuring then the last statement isn't
true.
</pre>
</blockquote>
I do not agree with you. That's something different. The last point is
about someone sniffing the traffic and getting your private keys (i.e.
by force) and still not being able to decode anything. Logging is about
the guy you're talking to. There is no _software_ that can tell you if
you can trust him. You have to trust him, that he's not logging. You
have to trust him that he keeps his computer free of spy ware, etc.<br>
Logging affects only the third statement anyway. And not even that,
because you can always say the he edited the log with a editor. <br>
This stuff is all about "the others" not about the guy you're talking
to.<br>
At least if I got it right. ;-)<br>
Morty<br>
</body>
</html>