13 ms·
It would be a far simpler crypto design if it didn't insist on deniability as a feature. OTR always operated in a weird niche, but it solved a specific problem
by dvanduzer 11y ago
It would be a far simpler crypto design if it didn't insist on deniability as a feature.
OTR always operated in a weird niche, but it solved a specific problem for IM that everyone had. But simpler / more elegant protocols don't always win, and never because of the quality of the crypto. For example: https://en.wikipedia.org/wiki/Simple_public-key_infrastructure https://en.wikipedia.org/wiki/Simple_public-key_infrastructu...
- rosser 11y agoIf you need deniability, you need it. Like, your life could literally depend on having it. I'd say that justifies some protocol complexity.
- zmanian 11y agoMost of the protocols with forward secrecy and non-deniability also require synchronous communication to agree on ephemeral keys. Deniability is almost a nice side effect of the asynchronous design. It doesn't seem like it adds tremendous complexity unto itself.