[OTR-users] PGP integration?

Ximin Luo infinity0 at gmx.com
Thu Sep 27 21:19:22 EDT 2012


Hi, are there any plans to integrate OTR keys with PGP? (c.f. how monkeysphere
integrates SSH keys with PGP).

It's good that crypto products don't also try to provide a PKI and reimplement
the wheel, but then they should actually *use* existing ones to fill this gap!

Also, how does OTR prevent MITM against "Q/A" and "Shared secret" auth[1], as I
was under the impression that only physical face-to-face verification of
fingerprints (or a derived process, e.g. PGP's WoT) can prevent such attacks.

X

[1] http://www.cypherpunks.ca/otr/help/3.2.0/authenticate.php

-- 
GPG: 4096R/5FBBDBCE
https://github.com/infinity0
https://bitbucket.org/infinity0
https://launchpad.net/~infinity0

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20120928/243fe860/attachment.pgp>


More information about the OTR-users mailing list