[OTR-users] Re: automatic end-private on logoff?

Scott Ellis mail at scottellis.com.au
Tue Oct 30 22:45:38 EDT 2007


On 10/31/07, Paul Wouters <paul at cypherpunks.ca> wrote:
>
> On Mon, 29 Oct 2007, Robert Eden wrote:
>
> > > FYI - i've added three related options to the miranda plugin that
> users
> > > seem to appreciate: an option to end sessions when the other end goes
> > > offline (switch to FINISHED state), an option to end sessions when the
> > > message window is closed (also switch to FINISHED) and a third option
> (with
> > > a warning) to timeout finished sessions back to the PLAINTEXT state
> after a
> > > certain amount of time. this can introduce some incompatibilities, but
> > > there's no way to get miranda to send a message before a protocol goes
> > > offline locally to terminate sessions 'properly'.
> > >
> >
> > If those options could be added to the pidgin plugin that would be
> perfect.
> > (send a FINISH request on exit)
>
> That is leaking information though, if the settings for the remote user is
> "opportunistic".
>
> So, i am typing something to remote user, who then just before i hit
> return
> pops offline. If my client then automatically goes into FINISHED state,
> just
> before I hit return, I just leaked a cleartext message!
>
> Paul


It doesn't send messages in the FINISHED state - you mean the PLAINTEXT
state. That's why it doesn't change to PLAINTEXT immediately - it has a
cocnfigurable timeout, and shows the usual message(s) regarding the initial
switch to the FINISHED state.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20071031/c106e779/attachment.html>


More information about the OTR-users mailing list