[OTR-users] some questions

[Ian Goldberg]

On Fri, Dec 29, 2006 at 03:28:20PM +0100, readytogo2 wrote:
> > > The Miranda plugin isn't by the same developers as the library, gaim
> > > plugin, and the proxy.  I personally have no opinion about that code,
> > > since I don't even have a way to try it out.
> Well, if you don`t want to try it out it`s ok. But I am sure you *can*
> try it. I am everything else but a *nix expert, but I could run miranda
> under wine (ubuntu).

Fair enough.  But of course, just trying it out won't tell you anything
about what's going on under the hood.

> >> >> 2.
> >> >> Will you add deniability or perfect forward secrecy to the gaim plugin
> >> >> in the future?
> > >
> > > ?? The gaim plugin has had those features since day 1.  Or am I
> > > misunderstanding your question?
> >From otr page faq: "
> How is this different from the gaim-encryption plugin?
> The gaim-encryption plugin provides encryption and authentication, but
> not deniability or perfect forward secrecy. If an attacker or a virus
> gets access to your machine, all of your past gaim-encryption
> conversations are retroactively compromised. Further, since all of the
> messages are digitally signed, there is difficult-to-deny proof that you
> said what you did: not what we want for a supposedly private conversation!"
> 
> That`s why I asked if you are going to add this feature in the future.

Huh?  We didn't write the gaim-encryption plugin; that's a totally
separate piece of software.  This FAQ entry is just *comparing* the
features of gaim-otr to those of gaim-encryption.  gaim-otr has all of
the features of otr, including deniability and perfect forward secrecy.

> >> >> 3.
> >> >> I am using miranda/gaim plugin, can I save or export my
> fingerprint? If
> >> >> I want to user another client, another accountname or the proxy can I
> >> >> use my old "identy" anyway so my contact doesn`t need to trust a new
> >> >> fingerprint?
> > >
> > > There's no explicit way to do it at the moment (with the main plugin,
> > > anyway), but copying the otr.private_key file around should work.
> I think to use the proxy would be the best way for everyone right now?
> Is the proxy portable? I also don`t know what is compatible to each
> other. :(

Any software that uses libotr should have compatible otr.private_key
files; I don't think switching to the proxy would change this situation
at all.

> >> >> 4.
> >> >> A contact of mine is using trillian. I could convince him at least to
> >> >> you the otr plugin (not the otr proxy! not secure im!) (I think this
> >> >> there http://trillianotr.kittyfox.net/.) and I am using the miranda
> >> >> plugin. From miranda to miranda otr chat`s work great but to
> trillian I
> >> >> see html tags all the time. Can this be fixed?
> > >
> > > I've heard of this problem before, even *without* otr.  It seems
> > > Trillian uses its own custom markup language instead of html (which all
> > > other clients use).  I'm guessing there's a way to fix this, since it
> > > certainly can't be the case that all Trillian users see html tags all
> > > the time, but you'd have to ask someone who uses Trillian.
> Not the Trillian user see html tags, the miranda user does (me). Well,
> nvm I don`t get why someone need to use Tril if there are enugh free und
> better alternatives.
> 
> I tested to chat with my self from Gaim (OTR Plugin) to Miranda (OTR
> Plugin), there is almost the same errror. [SIZE=10]..Message..[/SIZE]
> Perhaps the Miranda OTR Plugin is broken. Maybe I should use the proxy
> instant.

I must have had it backwards in my mind, then.  Perhaps it's Miranda
that uses the "square brackets" markup language.  

   - Ian