Gibberbot is wide open to practical mitm SSL attacks and of course timing analysis to see who you're talking to. If you use it or any other jabber w/OTR, you wo

Gibberbot is wide open to practical mitm SSL attacks and of course timing analysis to see who you're talking to. If you use it or any other jabber w/OTR, you would want to use it tunneled through another layer of encryption like Tor, so if you and your associates use .onion XMPP servers (and they aren't traffic analysis honeypots or run by incompetent admins/badly configured) then you get an extra layer of encryption to defeat future attacks should there be found a major bug in Gibberbot's OTR implementation and agencies just go back to all the traffic they collected and archived and use the bug to decrypt your old messages.