Comments (8)
@giovaneliberato probably...
from pidgin-otrng.
We were thinking with @sahrosa and @giovaneliberato to create a hash of both fingerprints and show that as the fingerprint, maybe.
That makes a lot of sense!
from pidgin-otrng.
@sahrosa this is a UI issue :)
from pidgin-otrng.
The authentication of another user is done on OTR menu option, and then user click on "Authenticate buddy", as can be seen below:
After a window will pop up asking for the authentication method. The default method is question and question and answer. So, to see the fingerprint we need to changed to "Manual fingerprint verification". And then we'll see something similar to following image:
In this case, Alice's fingerprint is:
Purported fingerprint for alice@localhost:
C65D1F68 F374F317 4C54FEDC 4CBA0B04
FFC9BD1D 6FEFE9A0 3CC839AF 53ABFF15
6EA5E422 CAA3679A 692B586E 9A6AB3F9
8D954BC5 1B8109F1
Brainstorm
- Show both fingerprints is just concatenate then into one, the result will be similar to this:
Purported fingerprint for alice@localhost:
C65D1F68 F374F317 4C54FEDC 4CBA0B04
FFC9BD1D 6FEFE9A0 3CC839AF 53ABFF15
6EA5E422 CAA3679A 692B586E 9A6AB3F9
8D954BC5 1B8109F1 40B0ABC4 CDEF45C4
51FFBA35 FA938CC3 0A9EFEF6 D1DB9CFF
9F3BA6A9 E685B296 A9763AAC 224E5AE6
1F9018B1 5CB459D8 713F473F 86F1D56C
Problems:
- user can get confuse by the length of the fingerprint varying (shorter if user only has otrv4 key).
- Has two session on for each fingerprint. Like this:
OTRv4 fingerprint for alice@localhost:
C65D1F68 F374F317 4C54FEDC 4CBA0B04
FFC9BD1D 6FEFE9A0 3CC839AF 53ABFF15
6EA5E422 CAA3679A 692B586E 9A6AB3F9
8D954BC5 1B8109F1
OTRv3 fingerprint for alice@localhost:
40B0ABC4 CDEF45C4
51FFBA35 FA938CC3 0A9EFEF6 D1DB9CFF
9F3BA6A9 E685B296 A9763AAC 224E5AE6
1F9018B1 5CB459D8 713F473F 86F1D56C
Problems:
- user can miss of the fingerprint when checking.
Please, feel free to edit this comment and add more possible solutions
from pidgin-otrng.
The issue is for showing everywhere. It is missing on the configuration options:
and also the fingerprints of the parties:
Show both fingerprints is just concatenate then into one, the result will be similar to this:
This will be very confusing for an user.
Has two session on for each fingerprint. Like this:
This can work.
We were thinking with @sahrosa and @giovaneliberato to create a hash of both fingerprints and show that as the fingerprint, maybe.
Thanks!
from pidgin-otrng.
hey @claucece, just a clarification
We were thinking with @sahrosa and @giovaneliberato to create a hash of both fingerprints and show that as the fingerprint, maybe.
If we decide going this way, this need to be a spec decision rather than a plugin decision, right?
from pidgin-otrng.
I think they need to be shown separately.
When it comes to the list of fingerprints that we have seen, my proposal is that we have a new column with v3 or v4, and then simply add a line for when we see a v4 or a v3 fingerprint. Now, we will only show a v3 fingerprint here if we have done a v3 AKE.
from pidgin-otrng.
We have implemented this in the way I suggested. From my perspective it seems to work fine.
from pidgin-otrng.
Related Issues (20)
- The otrng_plugin_conversation type worries me HOT 3
- Fix the deprecated compile warning HOT 1
- Crash by segmentation fault on fingerprints HOT 4
- In the past: OTR showed the html/rtf tags HOT 3
- OSX: Package 'libffi', required by 'gobject-2.0', not found HOT 11
- Review Test Case Fingerprint authentication HOT 1
- Review Test Case Publication HOT 4
- Publication of prekey material is not trigerred HOT 1
- Annoying message appear every time a message is sent or received HOT 4
- Crash when ending conversation HOT 16
- Give more information around what the privacy status means HOT 4
- Create an authors page HOT 8
- Add memory checks and static analyzers HOT 2
- Package 'libffi', required by 'gobject-2.0', not found MACOS-10.12.6 Sierra HOT 1
- Fingerprint verification - the privacy status changes too early HOT 4
- Stop printing messages with links HOT 7
- Ensure that we check the return value always HOT 2
- Incorrectly assuming there is always going to be v3 files HOT 3
- There should not be a way to start a conversation with yourself HOT 1
- Show the ssid HOT 9
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pidgin-otrng.