News for hackers. Stuff that matters.

A comment on Show HN: Open-Source Anonymous Encrypted TLS+OTR Messaging Written in Go. Parent comment

Re:Show HN: Open-Source Anonymous Encrypted TLS+OTR Messagin... by RomanPushkin on Monday July 27, 2015 @04:03PM (#9957664)
Fair enough, huh :) Actually, it's mentioned because we wanted to note it somehow - it's always better to have this set up on your own server
[ Parent | on HN ]
Re:Show HN: Open-Source Anonymous Encrypted TLS+OTR Messagin... by kodablah on Monday July 27, 2015 @04:19PM (#9957738)
I haven't looked deeply into this implementation, but with OTR's forward secrecy and 3.1+ authentication, is that not enough to defeat even the server being compromised? (meaning, at least you would know it was compromised assuming you trusted the actor on the other end)
[ Parent | on HN ]
Re:Show HN: Open-Source Anonymous Encrypted TLS+OTR Messagin... by Bogdanovich on Monday July 27, 2015 @04:42PM (#9957863)
If server is compromised, web app source code would probably change to something else.
[ Parent | on HN ]