[OTR-dev] Secure connections through a connect/disconnect cycle, OTR error messages

Nikita Borisov nikitab at cs.berkeley.edu
Wed Jan 26 11:36:16 EST 2005


On Jan 25, 2005, at 9:26 PM, Evan Schoenberg wrote:
>
> 1)
> - My friend and I are chatting via OTR
> - I disconnect. I reconnect (same application session).  We can 
> continue chatting as before.
> - I disconnect and quit.
> - I relaunch the application and connect.  I open a message window to 
> my friend and send him a normal (unencrypted) message, not realizing 
> he has remained connected and not hit stopped the OTR session.
> - I receive:  ?OTR Error: You sent unencrypted data to <name>, who was 
> expecting encrypted messages from you.
>
> Question: Should a client disconnect all OTR sessions on an account 
> when that account disconnects? And from my friend's perspective, 
> should a client disconnect an OTR session when the target contact 
> disconnects?

On reason you might not want to kill the session is if the reason you 
disconnected was that your network connection temporarily went down.   
You and your friend might want to keep the same OTR session around once 
the connection comes back up.

- Nikita




More information about the OTR-dev mailing list