News for hackers. Stuff that matters.
Re:OX (OpenPGP for XMPP): A New OpenPGP XEP by daturkel on Thursday January 07, 2016 @09:00AM (#10857907)
Yeah I've never seen an implementation of OTR that blocked archival—in the journalistic sense, it's still on the record so to speak. (That being said, OTR's deniable authentication means I can use my plaintext archive to recall the conversation but I can't prove to a third party that it's from who I say it was—nor would I be able to if I was storing the encrypted conversation.)

With the above considered, I'm curious to hear another argument for OpenPGP over XMPP rather than OTR.

(Edit: Should say that there likely are OTR implementations that archive the ciphertext, or don't automatically archive at all. However, having used OTR in Jitsi and Adium, both I believe keep regular old plaintext logs.)

Re:OX (OpenPGP for XMPP): A New OpenPGP XEP by iheartmemcache on Thursday January 07, 2016 @12:30PM (#10859290)
Even if it was blocked by the implementation, the second it hits your local machine is the second an end-user can capture it (either by recompiling the plugin, the base software, hooking DLLs, accessing the heap directly, with screenshots or even with a Polaroid).

The only advantage of OpenPGP/GnuPG over XMPP I can think of is it supports multiple end-users via merged groups out of the box. With OTR it's harder to logistically organize multi-session key-sharing. And if one of your machines is compromised, you can do a PKI revoke via CRL (or whatever it's called in GPG, slipping my mind at the moment).