Off-the-Record (OTR) encryption plugin discussion thread

[sje]

OTR plugin available at:

http://addons.miranda-im.org/details...ewfile&id=2644

be aware that when the policy is set to 'opportunistic' for a given contact, the first message you send (when initiating a converstation with an OTR-capable contact) will not be encrypted - just wait for the notification before saying anything 'sensitive'

more info on this encryption method can be found here:

http://www.cypherpunks.ca/otr/

beta version can be found here and beta source is available via subversion from https://server.scottellis.com.au:2401/svn/mim_plugs/otr

[Drugwash]

Added the thread to the sticky here.

Would one of the moderators be so kind and selectively merge the posts from this and this thread into the present one? Thank you! :-)

[sje]

updated to version 0.0.2.2 (should be available via updater) - now allows for a default policy and per contact policies, including 'manual' which adds start/stop OTR menu items to the contact(s)...also I changed most message boxes to use popups instead

[BigMike]

Hi,
thanks for your work,
but I have some problems establishing secure connections between two (Miranda) clients. I think this requires further testing by my side with different SRMM plugins and configurations, so I wanted to ask, if there's already a FAQ or a readme with known errors or tips...
(At the moment I tested with Miranda 0.4.0.1 stable and TabSRMM 0.9.9.98 Unicode stable)

And I read about your plan to improve the "look and feel" of your plugin,
so I would like to propose to do it similar to the SecureIM mod by Baloo. I like this very much, but i would prefer your plugin for two main reasons:
- It seems to be more secure (I don't know much about the way, SecureIM is encrypting messages, only that the keylength is 192bit, which I read in an old readme)
- and there are also plugins for Trillian and GAIM...

So I think it would be nice, if there were the following GUI-features (from SecureIM):
- PopUp-notifications for
key-exchange, requests of secure sessions, succeess of establishing a secure session, transmission of encrypted messages and errors...
- Display an icon in the contact list, if a secure connection is established
- Support of TabSRMM (has an Icon in the status bar, which indicates, if the connection is secure
- Special sounds for incoming/outgoing secure messages

Thanks in advance,
BigMike

[sje]

BigMike - all good suggestions. i've been trying to find out how to do the icon in tabsrmm...some of the notifications may be difficult because the processes are handled by the library...this is the place to post any bug reports etc - it's very new and apart from you and pescuma i don't know of anyone using the plugin, so i do appreciate your feedback

[BigMike]

Hi sje,
so I did some testing with my Miranda via ICQ network.
First: a short version information
On both sides:
Miranda ver 0.4.0.1
ICQOscar 0.3.5.2
SRMM 2.4.0.0
TabSRMM 0.9.9.98

OTR connection policy: manual

Connections betweenn TabSRMM on both sides or TabSRMM and SRMM module didn't work at all. When I tried to set up a connection from SRMM or TabSRMM to TabSRMM, the "receiving-client" told me, someone is trying to establish an OTR connection but there's no plugin.
From SRMM to SRMM I was able to establish a OTR connection (a popup told me...) but when I sent messages, the Text got lost; I saw only
"Contact:"
There was also no whitespace after this...

[Markuz Nightwind]

Hi, I'm experiencing some problems here too. I'm using latest nightly build #42 and when I try to send a message (only with ICQ, MSN is ok) sometimes it gives me an error that the other side cannot receive the message because we aren't in a private chat and viceversa when he tries to write me, i cannot read him because he writes me in clear.
In other words there are some problems to send the flags on begin of the crypted session, one part send messages crypted, the other receive clear.
I don't know why I have this behaviour only with ICQ, but this is.

[sje]

hmm...i have done my testing using the latest miranda from cvs (unicode version) and scriver unicode. it might also be a good idea to report your OTR version here too - updating from my server isn't 100% reliable (it's no production machine and i do push it a little hard :)

[BigMike]

In fact a good idea to mention the version of the tested plugin ;)
I'm sorry, my OTR version is 0.0.4.1

OK, downloaded Scriver version 2.2.9.3;
Tested with Scriver as SRMM on both sides. (Other versions like last post)

With Scriver unicode build there's the same problem like with TabSRMM (but for the latest TabSRMM there's only a unicode version available at the moment)
But it seems to be a unicode/non-unicode problem :(
So some thoughts of mine on my weird configuration concerning unicode plugins:
ICQ Oscar 0.3.5.2 supports unicode messages only with SRMM unicode (according to file listing description).
If this is relevant: Because TabSRMM needs a unicode database driver, I'm using yours with AutoBackups (0.5.5.1, also from file listing)

With Scriver non-unicode build I can establish a secure connection, but the one way (from the client which initiated OTR-session) I get some garbage as message, the other way round (to the client which initiated OTR-session) I get empty messages again...

[joecamel]

I have problems with OTR messing my outgoing messages while not working with any encryption.

I described the problem on this thread:
http://forums.miranda-im.org/showthread.php?p=45822