[OTR-dev] OTR over SIP?

Abel Luck abel at guardianproject.info
Tue Mar 19 17:48:13 EDT 2013


Nathan of Guardian:
> 
> 
> "Daniel ".koolfy" Faucon" <koolfy at koolfy.be> wrote:
> 
>> On Tue, 19 Mar 2013 08:06:38 +0000
>> Nathan of Guardian <nathan at guardianproject.info> wrote:
>>
>>>
>>> Jitsi supports short/instant messaging[0] via SIP-over-TLS. Jitsi
>> also
>>> supports OTR.
>>>
>>> Anyone have any success doing OTR-over-SIP?
>>>
>>> Thanks!
>>>
>>> +n
>>>
>>
>> Jitsi uses ZRTP for the SIP encryption, I don't remember if ZRTP
>> provides PFS or not, if I recall correctly it does. So it's kind of
>> "OTR for SIP"-ish...
>>
>> Is that what you meant?
>>
>> (I tried to make it work with the previous version of Jitsi but had
>> problems with Jitsi bugs, I should try with the last version. I have
>> heard of friends who made it work flawlessly so it shouldn't be too
>> hard.)
> 
> Actually I meant specifically for the text messaging aspect of SIP and not voice/video/media stream.
> 

This is an important distinction.

"Jitsi uses ZRTP for the SIP encryption" isn't a true statement. SIP
generally uses TLS to achieve confidentiality. ZRTP is only for the
media stream, which is separate from SIP.

wrt original question: I think Jitisi's support for OTR is in the IM
features (xmpp et. al) not the SMS feature.

~abel




More information about the OTR-dev mailing list