News for hackers. Stuff that matters.

A comment on Why Jabber reigns across the Russian cybercrime underground. Parent comment

Re:Why Jabber reigns across the Russian cybercrime underground by upofadown on Monday January 18, 2021 @05:15AM (#25820208)
OTR is certainly simpler than Signal. Signal's claim to fame is that it can deal with the case of an offline client and still offer forward secrecy. In Signal's case that means a server based infrastructure to store cryptographic state that the decentralized OTR gets along without. On top of that, Signal's per message forward secrecy (OTR is per session) adds even more complexity.
[ Parent | on HN ]
Re:Why Jabber reigns across the Russian cybercrime underground by nousermane on Monday January 18, 2021 @08:13AM (#25821455)
> deal with the case of an offline client and still offer forward secrecy.

Wasn't that addressed by OMEMO, the OTR "replacement" protocol?

[ Parent | on HN ]
Re:Why Jabber reigns across the Russian cybercrime underground by upofadown on Monday January 18, 2021 @04:11PM (#25826678)
Yeah. Basically Signal protocol over XMPP. It uses the XMPP server for the stored/delayed cryptographic state which is why you need a server that can do PEP (Personal Eventing Protocol) if you want to do OMEMO.

OMEMO has pretty much replaced OTR in the clients so if you want simple/stateless you are left with one of the two PGP flavours.

[ Parent | on HN ]