[OTR-dev] Flaw in OTR Protocol (with workaround!)

[Ian Goldberg]

On Thu, Aug 04, 2005 at 01:36:01PM -0400, Evan Schoenberg wrote:
> Currently:
> OTR session with Alice
> I exit my client (without selecting End Private Conversation, which  
> is what happens with most users)
> I reconnect
> Alice says something.  Her client is currently in the Private state,  
> with the previous secure session.
> I get an encrypted message I can't read (sent using the encryption  
> from the old secure session).

Note that this causes OTR to automatically restart if you're in
Opportunistic mode.

   - Ian