[Pidgin] #15691: pidgin otr, secure connection

Pidgin trac at pidgin.im
Sun Jul 14 11:26:29 EDT 2013


#15691: pidgin otr, secure connection
----------------------+---------------------------
 Reporter:  aammuu    |       Owner:  rekkanoryo
     Type:  defect    |      Status:  closed
Milestone:            |   Component:  unclassified
  Version:  2.10.7    |  Resolution:  invalid
 Keywords:  security  |
----------------------+---------------------------
Changes (by datallah):

 * status:  new => closed
 * resolution:   => invalid


Comment:

 These questions are better asked of the authors of the guide that you
 linked to.

 The difference between "Old Style SSL" and "Required Encryption" is that
 with the former the initial connection is made over SSL, and in the
 latter, the connection is initially made over a plain socket connection
 and upgraded to TLS based on a server negotiation.  The latter isn't
 considered "Less Secure" (although it probably makes it easier to tell
 that you're making a XMPP connection).

 For Question 2 - any service that you connect to will be able to extract
 information about your communications - OTR is only going to obscure the
 content of your messages, not the fact that you're connected, or who
 you're communicating with.  You'll need to decide what's appropriate for
 your needs.

-- 
Ticket URL: <https://developer.pidgin.im/ticket/15691#comment:1>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list