[OTR-users] encrypted file transfer

[Ian Goldberg]

On Mon, Jun 29, 2009 at 07:30:47PM +0200, Markus Krainz wrote:
> Oh no! Tens of kilobytes will almost cause my clipboard to run out of
> memory when I copy and paste it. :-)

But it's annoying at the other end to have to scroll through many, many
pages to find the top of the key, in order to copy and paste it into
gpg.  (This is admittedly not a *huge* problem.  Just a bit annoying.)

> You seem to have ignored the and "vice versa" part. If needed the
> encrypted file can be signed without extra effort.

But that destroys the deniability properties of OTR.  It's exactly
because PGP/gpg has no way to do deniable authentication that OTR was
invented, in fact.

The method you use does, of course, work, but only if you don't care
about deniability and/or authentication.  If you care about them both,
PGP/gpg doesn't help you.

   - Ian