otrv4 / otrv4-over-xmpp

OTRv4 over XMPP. This is a mirror of https://bugs.otr.im/otrv4/OTRv4-over-XMPP

OTRv4 over XMPP

Thoughts around how OTRv4 will work over XMPP.

Funding

The work made hare was supported by the NlNet Foundation. Find information here.

Licensing and Use

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

The OTR team does not review implementations or specify which ones are compliant are not. Software implementers are free to implement this specification in any way they choose - under limitations of software licenses if using existing software.

otrv4-over-xmpp's Issues

Define how to do encrypted file transfer

Define how multicasting/synchronization/policies/instance tags will work

Maybe this can be used: https://xmpp.org/extensions/xep-0280.html, https://xmpp.org/extensions/xep-0313.html

Correctly define the prekey mechanism for XMPP

Explain how online and offline modes will work over XMPP

Explain XMPP invisibility status and OTR

Explain how key management will work

Explain how to do encryption of not only message bodies

Check: OpenPGP for XMPP (XEP-0374)

Review XEP0364

See: https://xmpp.org/extensions/xep-0364.html

Important points:

• OTR messages section

Consider different solutions for carrying the encrypted message

Older versions of OTR were replacing the body of the message with the encrypted payload. This is probably no longer considered an elegant solution. Instead, OTR would probably have to come up with some sort of extension element which carries the encrypted message. This might break some use-cases like bridges though.