From 9932fd4433b5b6b7529fcfe6bdbf2db45c1c5388 Mon Sep 17 00:00:00 2001 From: Paul Schaub Date: Sun, 8 Mar 2020 13:07:09 +0100 Subject: [PATCH] Be less harsh to OTR :P --- xep-0384.xml | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/xep-0384.xml b/xep-0384.xml index 6a12f8ae..d3cb2869 100644 --- a/xep-0384.xml +++ b/xep-0384.xml @@ -80,12 +80,13 @@

There are two main end-to-end encryption schemes in common use in the XMPP ecosystem, Off-the-Record (OTR) messaging (&xep0364;) and OpenPGP - (&xep0027;). OTR has significant usability drawbacks for inter-client - mobility. As OTR sessions exist between exactly two clients, the chat - history will not be synchronized across other clients of the involved - parties. Furthermore, OTR chats are only possible if both participants are - currently online, due to how the rolling key agreement scheme of OTR - works. OpenPGP, while not suffering from these mobility issues, does not + (&xep0027;). Older OTR versions have had significant usability drawbacks for inter-client + mobility. As OTR sessions existed between exactly two clients, the chat + history would not be synchronized across other clients of the involved + parties. Furthermore, OTR chats were only possible if both participants were + online at the same time, due to how the rolling key agreement scheme of OTR + worked. Some of those problems have been addressed in OTRv4. + OpenPGP, while not suffering from these mobility issues, does not provide any kind of forward secrecy and is vulnerable to replay attacks. Additionally, PGP over XMPP uses a custom wireformat which is defined by convention rather than standardization, and involves quite a bit of