[Telepathy] Encryption and OTR

[Olivier Crête]

On Wed, 2010-12-15 at 22:41 -0600, Reşat SABIQ wrote:
> Thanks Xavier. OTR=P2P encryption for messaging.
> 
> A few follow-up questions:
> 1. Could somebody please confirm that selecting
> Encryption required (TLS/SSL)
> leads to video and audio streams being encrypted as well?

No

> 3. Will future OTR support also include OTR (p2p) encryption for video 
> and audio?

No, encryption for calls is SRTP and is a completely separate topic.

> 
> Thanks a bunch.
> 
> 07.05.2010 01:29, Xavier Claessens yazğan:
> > TLS/SSL will encrypt your messages from you to gtalk server. But gtalk 
> > server will decrypt it to send to your destination contact (and 
> > eventually re-encrypt). That means that Google can read your 
> > conversations.
> >
> > OTR is a p2p encryption, so only the end destination can decrypt the 
> > message, any people between you and your contact will only see 
> > encrypted data. In that case Google won't be able to read what you say.
> >
> > So IMO the question is: "do you trust your server", if not you should 
> > use OTR, otherwise TLS/SSL is enough. tbh if you don't trust your 
> > sever, you already lost...
> >
> > Xavier Claessens.
> 
> _______________________________________________
> telepathy mailing list
> telepathy at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/telepathy

-- 
Olivier Crête
olivier.crete at collabora.co.uk
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.freedesktop.org/archives/telepathy/attachments/20101216/b8bdd522/attachment.pgp>