3 ms·
As long as they keep XMPP support around for ordinary google talk accounts, you have the power to use clients that support OTR-encrypted IMs. That way, Google o
by gcr 13y ago
As long as they keep XMPP support around for ordinary google talk accounts, you have the power to use clients that support OTR-encrypted IMs. That way, Google only stores useless messages.
Pidgin and bitlbee make this super simple to set up. In fact, by default, my client performs auto-detection of someone else's OTR plugin, which means that after I send my first message to someone, my conversation is automatically "lifted" to an encrypted (albeit untrusted) channel. When set up properly, it's so seamless that I don't even notice it happened.
- moe 13y agoThis works as long you only chat from a single device. Try switching between e.g. laptop and desktop and everything goes up in flames.
- gcr 13y agoSo there's some problems with re-establishing an encrypted channel. Usually I get a message telling me that bitlbee has to renegotiate the connection, but then I'm back in action.
- moe 13y agoWell, try it with two clients simultaneously connected... If you're lucky the 3 clients will negotiate down to disabling the encryption. But normally they'll just engage in a mutual, infinite re-send loop...
- angersock 13y agoEh, if you have two clients connected, you're not being really secure, right? Leaving that door open is bad juju.
- moe 13y agoI don't understand what you mean. How does having two clients connected rule out "being really secure"?
- angersock 13y agoIt seems insecure to leave another point of access open to the conversation, if merely out of principle, due to concerns over leaving a window open for eavesdropping.
- moe 13y agoThere's no reason that has to be insecure (depending on your definition of "secure"). There's also no reason the user shouldn't be allowed to make that choice for himself.