[OTR-dev] mod_otr: man in the middle implementation for ejabberd

Paul Wouters paul at cypherpunks.ca
Sat Mar 31 14:38:19 EDT 2007


On Fri, 30 Mar 2007, Olivier Goffart wrote:

> I have developed a module for ejabberd  (A widely used Jabber server) that do
> the man in the middle attack on OTR messages.

Excellent!

> I made this module to show that it is not possible to make e2e encryption user
> friendly.

I would call OTR pretty userfriendly....

> So now, check your fingerprints :-)
> mod_otr: http://ejabberd.jabber.ru/mod_otr

I'll have to play with this!

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155



More information about the OTR-dev mailing list