<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Didier Frick schrieb:
<blockquote cite="mid1147014471.8620.2.camel@localhost.localdomain"
type="cite">
<pre wrap="">Le samedi 06 mai 2006 à 19:28 +0200, Paul Wouters a écrit :
</pre>
<blockquote type="cite">
<pre wrap="">People want want to keep logging, especially if they are using disk encryption
for their homedir (eg FileVault or something else). So please don't change
logging without telling the user. eg Make it an explicit option in the OTR
menu or something?
</pre>
</blockquote>
<pre wrap=""><!---->
I don't think disk encryption preserves forward secrecy, and the issue
becomes the one I outlined in my last message: even if _you_ do it
correctly, how can you be sure that your correspondents "get it" and do
it correctly as well....
So I still contend that the only way to preserve forward secrecy without
too many gaping holes that you can't control is to never log any OTR
conversation in any way.
</pre>
</blockquote>
<br>
I agree with you. But I think that there are still a few people who'd
like to use OTR and still log to disk (like me). I'd vote for an
option to turn it on and of, and a warning-icon to show you that you
are logging. And maybe some notice that the other one is logging, but I
don't think it's too sensible. You can never go for sure that the other
one is not logging. IMHO the user has to decide but has to be warned.<br>
Morty<br>
<br>
<div class="moz-signature"><br>
</div>
</body>
</html>