2 ms·

TLS doesn't help you there. A server could just as easily serve you a maliciously modified OTR plugin.