Questions tagged [off-the-record]

Off-the-Record Messaging (OTR) is a protocol for encrypted instant messaging using Diffie-Hellman key exchange and AES-128 encryption.

Filter by
Sorted by
Tagged with
2
votes
0answers
240 views

End to end encryption and OTR on Gajim [closed]

In Gajim, does OTR and end to end encryption work together? Or is OTR turned off if I start end to end encryption?
4
votes
1answer
64 views

Mixing Off-The-Record and classic SSL

I am developing some pubsub system on top of Node.js and Socket.io. I decided to implement Off-The-Record (OTR) encryption by default for all of data transfers between clients and server(s). Question ...
0
votes
2answers
305 views

Is there any advantage on using OTR in a messaging app if the messages are first sent to a REST API server over HTTPS?

I don't have any kind of experience in security, but just on API and app development, and I'm developing an application for doctors and patients which has an added private messaging feature between ...
0
votes
1answer
294 views

Is it possible to perform one-way OTR MITM?

Here's something that is bugging me recently: suppose that me and my friend establish an OTR session and - as a result of that - DH key exchange is performed. My friend verifies my key, but I cannot ...
0
votes
2answers
94 views

Deniable discussions online [closed]

Consider this scenario: Alice is a typical corporate shark. She wants to get ahead in her organisation. Alice has a sensitive information security scenario, she needs expert consultation but she ...
4
votes
1answer
224 views

How does OTR's authentication using “Question and answer” protect against MiTM?

I've read that the answer has something to do Socialist Millionaire, but I still don't understand how can the user be protected against malicious Man In The Middle, which would capture the question ...
4
votes
2answers
148 views

How to establish a random OTR remote party as a specific individual?

In reading Glenn Greenwald's 2014 book No place to hide, one thing stood out to me as a bit odd. Greenwald details how Edward Snowden was insistent that Greenwald install PGP in order to communicate ...