Thanks Xavier. OTR=P2P encryption for messaging.
A few follow-up questions:
1. Could somebody please confirm that selecting
Encryption required (TLS/SSL)
leads to video and audio streams being encrypted as well?
2. This setting is user-, rather than conversation-specific, correct? If
the user A has it selected, but user B doesn't, communication from B to
server will not be encrypted. And even user A's part of the
conversation/audio/video when delivered from server to user B will not
(or might not be) encrypted?
3. Will future OTR support also include OTR (p2p) encryption for video
and audio?
Thanks a bunch.
07.05.2010 01:29, Xavier Claessens yazğan:
TLS/SSL will encrypt your messages from you to gtalk server. But gtalk
server will decrypt it to send to your destination contact (and
eventually re-encrypt). That means that Google can read your
conversations.
OTR is a p2p encryption, so only the end destination can decrypt the
message, any people between you and your contact will only see
encrypted data. In that case Google won't be able to read what you say.
So IMO the question is: "do you trust your server", if not you should
use OTR, otherwise TLS/SSL is enough. tbh if you don't trust your
sever, you already lost...
Xavier Claessens.
_______________________________________________
telepathy mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/telepathy
