[OTR-users] Re: automatic end-private on logoff?

Paul Wouters paul at cypherpunks.ca
Tue Oct 30 19:03:38 EDT 2007


On Mon, 29 Oct 2007, Robert Eden wrote:

> > FYI - i've added three related options to the miranda plugin that users
> > seem to appreciate: an option to end sessions when the other end goes
> > offline (switch to FINISHED state), an option to end sessions when the
> > message window is closed (also switch to FINISHED) and a third option (with
> > a warning) to timeout finished sessions back to the PLAINTEXT state after a
> > certain amount of time. this can introduce some incompatibilities, but
> > there's no way to get miranda to send a message before a protocol goes
> > offline locally to terminate sessions 'properly'.
> >
>
> If those options could be added to the pidgin plugin that would be perfect.
> (send a FINISH request on exit)

That is leaking information though, if the settings for the remote user is
"opportunistic".

So, i am typing something to remote user, who then just before i hit return
pops offline. If my client then automatically goes into FINISHED state, just
before I hit return, I just leaked a cleartext message!

Paul



More information about the OTR-users mailing list