[OTR-users] Private Keys File
    Richard M. Conlan 
    offtherecord at embracetherandom.com
       
    Thu Nov 16 00:46:37 EST 2006
    
    
  
For the GAIM plug-in, what is done to protect the otr.private_key file 
located at C:\Documents and Settings\<username>\Application Data\.gaim? 
Is it just protected by the Windows file system?
Since there is no password on startup I assume it is sitting there in 
the clear? Does this would imply that it is not protected from 
Administrators? This would mean that it isn't safe to use OTR at work, 
insofar as anybody with privileged access could get the key and do mitm 
with each.
I assume I am missing something?
=/
~RMC
    
    
More information about the OTR-users
mailing list