[OTR-users] OTR for audio/speech

[Greg Reagle]

On Thu, Apr 19, 2012, at 02:48 PM, Peter Saint-Andre wrote:
> On 4/19/12 2:39 PM, Greg Reagle wrote:
> > Thanks Peter.  Does this lack of full stanza encryption affect all
> > OTR use (including instant messaging), or just OTR use for
> > audio/video?
> 
> If all you do is send unformatted messages, then OTR is fine. If you
> do things like send an HTML-formatted message in addition to the plain
> text (see <http://xmpp.org/extensions/xep-0071.html>) then that added
> information might not be encrypted. That's true for a message subject
> <http://tools.ietf.org/html/rfc6121#section-5.2.4> too and any
> anything other than what in Jabber/XMPP is the <body/> element of the
> <message/> "stanza". Because XMPP is extensible, the fact that OTR
> encrypts only that <body/> element has worried us Jabberites for a
> while and has led XMPP developers to keep inventing new approaches to
> end-to-end encryption, none of which has really taken off. :(

What?!  I am shocked and dismayed.  Is this really true?  Would putting
a word in bold defeat OTR?  This would be a MAJOR defect.  Why doesn't
the OTR web page indicate this?

-- 
Greg Reagle
reagle at cepr.net