[Standards] OMEMO and Olm

Germán Márquez Mejía marquez.mejia at fu-berlin.de
Fri May 19 13:02:24 UTC 2017


Hi all,

Am 18.05.2017 um 22:35 schrieb Remko Tronçon:
> Hi Andrey,
> 
> My 2 cents:
> 
> -  For [5] (brought up by Germán Máquez Mejía): Things like 'trial and
> error' sound like a bad idea if they can be avoided, especially in a
> spec around encryption. I addressed this by adding the recipient JID in
> the key elements in PR #463, which guarantees the keys are
> collision-free (as device IDs are guaranteed to be unique per JID).

The idea behind the "trial and error" approach (already taken into
account in PR #460) was not to be so verbose with the JIDs. Remko's
approach simplifies the logic quite a bit and seems a reasonable
solution. My only question is: Are there any potential privacy issues
here? I don't see any, but maybe someone would.

BTW I just submitted my bachelor thesis on this topic:

https://userpage.fu-berlin.de/mancho/OMEMO.pdf (in German)

> 
> thanks,
> Remko
> 
> 
> On 18 May 2017 at 12:57, Andrey Gursky <andrey.gursky at e-mail.ua
> <mailto:andrey.gursky at e-mail.ua>> wrote:
> 
>     Hi,
> 
>     On Wed, 17 May 2017 16:59:53 +0100 Dave Cridland wrote:
> 
>     [ cut ]
> 
>     > A lengthy discussion ensued on this list, involving both Matthew
>     > Hodgson and others who clearly know a lot more about Crypto than I do.
>     > None of their arguments were answered. Remko supplied a PR to match
>     > these. It seems to be being ignored, then rejected out of hand.
> 
>     My emails [1..4] and an email from another one [5] regarding OMEMO
>     remained also without a response.
> 
>     Trying to discuss a quick fix of OMEMO jingle file-transfer was also
>     not welcome [6] :(
> 
>     [ cut ]
> 
>     Regards,
>     Andrey
> 
> 
>     [1]
>     https://mail.jabber.org/pipermail/standards/2016-December/031723.html <https://mail.jabber.org/pipermail/standards/2016-December/031723.html>
>     [2]
>     https://mail.jabber.org/pipermail/standards/2016-December/031724.html <https://mail.jabber.org/pipermail/standards/2016-December/031724.html>
>     [3]
>     https://mail.jabber.org/pipermail/standards/2016-December/031725.html <https://mail.jabber.org/pipermail/standards/2016-December/031725.html>
>     [4]
>     https://mail.jabber.org/pipermail/standards/2016-December/031736.html <https://mail.jabber.org/pipermail/standards/2016-December/031736.html>
>     [5]
>     https://mail.jabber.org/pipermail/standards/2016-December/031739.html <https://mail.jabber.org/pipermail/standards/2016-December/031739.html>
>     [6]
>     https://mail.jabber.org/pipermail/standards/2016-December/031737.html <https://mail.jabber.org/pipermail/standards/2016-December/031737.html>
>     _______________________________________________
>     Standards mailing list
>     Info: https://mail.jabber.org/mailman/listinfo/standards
>     <https://mail.jabber.org/mailman/listinfo/standards>
>     Unsubscribe: Standards-unsubscribe at xmpp.org
>     <mailto:Standards-unsubscribe at xmpp.org>
>     _______________________________________________
> 
> 
> 
> 
> _______________________________________________
> Standards mailing list
> Info: https://mail.jabber.org/mailman/listinfo/standards
> Unsubscribe: Standards-unsubscribe at xmpp.org
> _______________________________________________
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://mail.jabber.org/pipermail/standards/attachments/20170519/1c599839/attachment.sig>


More information about the Standards mailing list