17 ms·

OTR for mobile chat messaging like WhatsApp was discussed several times. At least the former ones (do not know version 3) did not allow OTR because both clients

OTR for mobile chat messaging like WhatsApp was discussed several times. At least the former ones (do not know version 3) did not allow OTR because both clients have to be online for handshaking and exchanging keys which is very often not the case for two mobile phones.

exo762 13y ago
Modified version of OTR (by Moxie) works around that restriction. https://www.whispersystems.org/blog/asynchronous-security/ https://www.whispersystems.org/blog/asynchronous-security/
- ciex 13y ago
  Doesn't this solution require trust in the server caching the pre-keys?
  - jlund 13y ago
    No, because you can still verify a user's fingerprint after the handshake has been completed. That's something that you'd want to do with traditional, non-asynchronous OTR as well.