[OTR-users] Gaim plugin and archiving

Ian Goldberg ian at cypherpunks.ca
Fri May 5 18:03:48 EDT 2006


On Fri, May 05, 2006 at 10:04:27PM +0200, Didier Frick wrote:
> Hi ,
> 
> first of all a big thanks to the developers for their work.
> I just installed the gaim-otr package on ubuntu and it works like charm.
> 
> There is one small issue IMHO with the handling of gaim's logging
> feature.
> 
> If an unsuspecting user uses the plugin and has the logging option
> activated,
> the private OTR conversations will be archived as well in clear text, 
> breaking forward secrecy.

It technically doesn't, because the logs are unauthenticated.  But I
agree that the option to disable logging of OTR conversations is a fine
plan, and it's already on the todo list (and I'm pretty sure the request
is already on sourceforge).

   - Ian



More information about the OTR-users mailing list