[OTR-dev] Multiple accounts

Kurt Roeckx kurt at roeckx.be
Tue Jul 2 10:37:30 EDT 2013


On Tue, Jul 02, 2013 at 06:56:50AM -0700, Howard Chu wrote:
> Jonas Wielicki wrote:
> >On 02.07.2013 15:35, Kurt Roeckx wrote:
> >>I seem to be more and more going to a PGP model, and have
> >>to wonder if it's possible to use my GPG key for OTR.
> >
> >Honestly I think that the absence of many of the PGP features is the
> >strength of OTR. OTR is so incredibly easy and, in my opinion, the only
> >current example of strong crypto done right (from the user experience
> >perspective).
> >
> >Adding complications such as key sync, key management, revocation etc.
> >is not what I consider useful for the general case.
> 
> Indeed, it completely misses the point. OTR provides repudiable
> communication. Unifying all your keys would weaken or destroy that
> property.

I'm not sure I follow that, and I don't see how OTR can give you
that.  If I first go and authenticate you and log all the
communiation I think I have non-repudiation.

The only thing I see OTR give you is that the communication is
private.


Kurt




More information about the OTR-dev mailing list