[OTR-users] Pidgin OTR and Audio/Video Calls

[Nathan of Guardian]

Peter Saint-Andre <stpeter at stpeter.im> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>One possible hole here is that OTR/XMPP encrypts your IMs and ZRTP/SIP
>encrypts your voice and video, but nothing encrypts your signalling
>for call setup. That could be solved if OTR were able to encrypt full
>XMPP stanzas and you used Jingle, or if OTR were used to encrypt the
>SIP messages. 

Well currently SIP signaling is encrypted via TLS to the server, at least in the OSTN model. I think you are hoping for something end to end perhaps, but still doesn't the server (if you are using one) need to be part of the signalling?