[opensource-dev] Encrypted chat & third-party servers

[Carlo Wood]

Nevermind, I should have read the rest of the thread first.
Looks like a pretty solid protocol.

Does anyone know if it is possible for an arbitrary TPV
to start an OTR with another TPV? If so, how? Or is it
needed to be recognized by the other viewer as being
a viewer that has OTR implemented?

How do two viewer know if they both can do OTR?

On Thu, Aug 26, 2010 at 02:53:25AM +0200, Carlo Wood wrote:
> On Wed, Aug 25, 2010 at 01:59:49PM -0700, Brian McGroarty wrote:
> > Has anyone spent time looking at the encrypted chat feature included in some
> > third-party viewers? It's my understanding that this contacts third-party
> > servers in obtaining and validating keys. Is that correct?
> 
> If that is correct, then I'm pretty sure that the owners of
> those servers have access to a key that would allow them
> to read the encrypted messages. Imho, that is not acceptable :p
> 
> Perhaps in time I'll be interested to implement a better
> method.
> 
> Carlo Wood (author of libecc http://libecc.sourceforge.net/reference-manual/index.html)
> _______________________________________________
> Policies and (un)subscribe information available here:
> http://wiki.secondlife.com/wiki/OpenSource-Dev
> Please read the policies before posting to keep unmoderated posting privileges

-- 
Carlo Wood <carlo at alinoe.com>