[OTR-users] Gaim plugin and archiving

Moritz 'Morty' Strübe morty at gmx.net
Sun May 7 13:51:39 EDT 2006


Didier Frick schrieb:
> Le samedi 06 mai 2006 à 19:28 +0200, Paul Wouters a écrit :
>   
>> People want want to keep logging, especially if they are using disk encryption
>> for their homedir (eg FileVault or something else). So please don't change
>> logging without telling the user. eg Make it an explicit option in the OTR
>> menu or something?
>>     
>
> I don't think disk encryption preserves forward secrecy, and the issue
> becomes the one I outlined in my last message: even if _you_ do it
> correctly, how can you be sure that your correspondents "get it" and do
> it correctly as well....
>
> So I still contend that the only way to preserve forward secrecy without
> too many gaping holes that you can't control is to never log any OTR
> conversation in any way.
>   

I agree with you. But I think that there are still a few people who'd
like to use OTR and still log to disk (like me).  I'd vote for an option
to turn it on and of, and a warning-icon to show you that you are
logging. And maybe some notice that the other one is logging, but I
don't think it's too sensible. You can never go for sure that the other
one is not logging. IMHO the user has to decide but has to be warned.
Morty


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20060507/8d1a0ce8/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: morty.vcf
Type: text/x-vcard
Size: 673 bytes
Desc: not available
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20060507/8d1a0ce8/attachment.vcf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3221 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20060507/8d1a0ce8/attachment.bin>


More information about the OTR-users mailing list