OTR kind of sucks, partly because of what you mentioned. I'm trying to introduce the Axolotl ratchet (behind TextSecure's security) into XMPP: https://github.

OTR kind of sucks, partly because of what you mentioned. I'm trying to introduce the Axolotl ratchet (behind TextSecure's security) into XMPP: https://github.com/rakoo/goax https://github.com/rakoo/goax The Axolotl ratchet provides true asynchronicity so you don't need to keep the link open forever. You don't even need the other party to be up; the message can be stored on either server and forwarded when the recipient connects, and the recipient will only decrypt the message at this moment. This is what we need.