[Telepathy] Encryption and OTR

[Reşat SABIQ]

Thanks Xavier. OTR=P2P encryption for messaging.

A few follow-up questions:
1. Could somebody please confirm that selecting
Encryption required (TLS/SSL)
leads to video and audio streams being encrypted as well?
2. This setting is user-, rather than conversation-specific, correct? If 
the user A has it selected, but user B doesn't, communication from B to 
server will not be encrypted. And even user A's part of the 
conversation/audio/video when delivered from server to user B will not 
(or might not be) encrypted?
3. Will future OTR support also include OTR (p2p) encryption for video 
and audio?

Thanks a bunch.

07.05.2010 01:29, Xavier Claessens yazğan:
> TLS/SSL will encrypt your messages from you to gtalk server. But gtalk 
> server will decrypt it to send to your destination contact (and 
> eventually re-encrypt). That means that Google can read your 
> conversations.
>
> OTR is a p2p encryption, so only the end destination can decrypt the 
> message, any people between you and your contact will only see 
> encrypted data. In that case Google won't be able to read what you say.
>
> So IMO the question is: "do you trust your server", if not you should 
> use OTR, otherwise TLS/SSL is enough. tbh if you don't trust your 
> sever, you already lost...
>
> Xavier Claessens.