[OTR-users] Encrypted File Transfer

[Bits]

Whoah, I thought Pidgin was a preferred platform for OTR and OTR was a
contender for the title "most secure communications protocol".

I see quite a few new Pidgin security issues were posted & fixed at the
end of Jan:
	https://www.pidgin.im/news/security/



"drwhax-at-2600nl.net |otr/Example Allow|" <9dmhumvlat at sneakemail.com>
writes:
>On 03/26/2014 03:01 PM, Nathan of Guardian wrote:
>> On 03/26/2014 05:14 AM, Jurre van Bergen wrote:
>>> On 03/26/2014 02:27 AM, Ben Silberstein wrote:
>>>>> If I send a file in Pidgin using XMPP while OTR is engaged in an
>>>>> encrypted session is that communication encrypted as well?
>>> No, it will simply be send over XMPP without an OTR layer.
>> I sure wish we could get more adoption for either our OTRDATA spec
>>
>(https://dev.guardianproject.info/projects/gibberbot/wiki/OTRDATA_Specifications)
>> or Crypto.cat's proposal for
>>
>https://github.com/cryptocat/cryptocat/wiki/OTR-Encrypted-File-Transfer-Specification
>>
>> Is it possible for the libotr plugin to intercept file transfer activity
>> in Pidgin or Instabird?
>I feel like nobody should ever develop anything for Pidgin ever again,
>it's such an horrible piece of software. The crypto can be so strong but
>you will get owned with any of the 1000+ 0days in it. I'm not sure about
>Instantbird. I would love to know as well.
>Jurre
>-- 
>http://jurrevanbergen.nl/
>_______________________________________________
>OTR-users mailing list
>OTR-users at lists.cypherpunks.ca


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20140326/c6847e4e/attachment.html>