[Standards] OTR

Dave Cridland dave at cridland.net
Tue Feb 3 09:04:26 UTC 2015


On 2 Feb 2015 18:49, "Peter Saint-Andre - &yet" <peter at andyet.net> wrote:
>
> On 2/2/15 5:22 AM, Hund, Johannes wrote:
>>
>> Hi,
>>
>> while I cannot help with it, I would be very thankful and greatly
>> welcome a document on what is and how to use OTR.
>>
>> Since it was undisclosed that even the NSA seems to have problems
>> breaking into OTR [1], it gained a lot of attention it seems and thus
>> does a good deal in supporting XMPP as a choice for applications with
>> high requirements in privacy and security as its often the case for
>> IoT applications.
>
>
> OTR secures only the character data of the XMPP <body/> element within
message stanzas. That's appropriate for IM but doesn't really help with
things like IoT (which often use extended namespaces).
>

Exactly, and this is the kind of thing I was hoping that documenting the
current OTR usage in XMPP would show clearly.

> Peter
>
> --
> Peter Saint-Andre
> https://andyet.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.jabber.org/pipermail/standards/attachments/20150203/e3f0a3f0/attachment.html>


More information about the Standards mailing list