[OTR-users] Pretty-please standardize OTR signature storage, per OS.

[Ian Goldberg]

On Wed, Oct 02, 2013 at 12:18:00PM -0400, subharo at hushmail.com wrote:
> Now then, both Jitsi and Gajim currently *only allow one OTR 
> fingerprint at a time, per contact*.  Where can you see this?

That's broken, then.  If this is true, bugs should be filed against
Jitsi and Gajim.

> Jitsi: "Tools" menu -> Options -> "Security" tab -> "Chat" sub-tab,
> see "Known Fingerprints" chart.  There is a button to "Forget
> Fingerprint" if you'd like to replace an older fingerpint with a
> new one.

pidgin-otr has the same button, but it doesn't prevent you from having
multiple fingerprints per contact.  The button just allows you to
selectively forget one of them.

> So yes, Ian, my primitive workaround assumes you can have only one 
> OTR fingerprint per contact in a given IM client.  And furthermore, 
> once a given OTR fingerprint is verified for a given contact, and 
> it should remain unchanged on an effectively-permanent basis.  If 
> you are aware of any open-source OTR-aware IM clients that allow 
> for multiple OTR fingerprints for a given contacts, I'd like to 
> hear about them.

pidgin-otr?

> I'd also like to boldly suggest that the whole OTR community 
> consider Jitsi as its new "reference implementation" of OTR, and 
> not Pidgin.  Why?  Because Jitsi has OTR deeply integrated and 
> turned on by default.  Jitsi gives OTR "first class citizen" 
> treatment, whereas Pidgin, Gajim, etc. do not (in that they treat 
> OTR as some hardly important, optional Plugin).

The intent is for pidgin-otr to ship as part of pidgin 3, actually.
(But I don't know if it will be enabled by default.  I hope it will be.)

   - Ian