[OTR-users] OTR for audio/speech

[Peter Saint-Andre]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 4/19/12 2:00 PM, Greg Reagle wrote:
> On Thu, Apr 19, 2012, at 01:28 PM, Paul Wouters wrote:
>> No, The #otr channel on freenode never really took of and was
>> abandoned.
> 
> I was trying to do the chat thing instead of using the email list
> to keep down traffic, but since there is no chat room I'll use the
> email list.
> 
> Is anyone using OTR to encrypt speech/audio (kind of like Skype)?
> If yes, what protocols are being used, how well does it work, and
> what software do you recommend?
> 
> I use OTR via the Pidgin OTR plugin because it is developed
> directly by the OTR developers (and I suppose that gives advantages
> in terms of timeliness and correctness).  I mainly use a
> Jabber(XMPP) account, text only--I haven't done audio/speech except
> with Skype.

For encrypted voice and video, the closest thing to OTR is ZRTP:

http://tools.ietf.org/html/rfc6189
http://xmpp.org/extensions/xep-0262.html

This is supported in, for example, the Jitsi client.

However, to be fully secure you'd need to make sure that the
signalling path is also encrypted. Unfortunately, right now OTR does
not support encryption of the complete XMPP "stanza" (packet) used for
negotiation of the media session. I am hoping that folks who care
about this enough can work with the OTR team to build full-stanza
encryption into a future version of OTR.

Peter

- -- 
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+QdWAACgkQNL8k5A2w/vwBxwCgiAkVVDncyNC5Sauz4jOWSlaS
nQYAnR0LKStP/4V4yrJV7IcL3expw49s
=/h4I
-----END PGP SIGNATURE-----