Difference between revisions of "OTR"

From XMPP WIKI
Jump to: navigation, search
(recommend OMEMO as replacement for OTR)
m
Line 19: Line 19:
 
== Client support ==
 
== Client support ==
 
=== Native ===
 
=== Native ===
* [http://adium.im/ Adium] (Mac OS X)
+
* [https://adium.im/ Adium] (Mac OS X)
* [http://bitlbee.org/ BitlBee] (Cross-platform)
+
* [https://bitlbee.org/ BitlBee] (Cross-platform)
 
* [http://icanblink.com/ Blink Cocoa](Cross-platform)
 
* [http://icanblink.com/ Blink Cocoa](Cross-platform)
 
* [http://centerim.org/ CenterIM] (Unix-like)
 
* [http://centerim.org/ CenterIM] (Unix-like)
* [http://climm.org/ climm] (Unix-like)
+
* [http://climm.org/ climm] - dead (Unix-like)
* [https://guardianproject.info/apps/chatsecure/ ChatSecure (formerly Gibberbot)] (Android, iPhone, Mac, Linux or PC)
+
* [https://chatsecure.org/ ChatSecure (formerly Gibberbot)] (iPhone)
* [http://jitsi.org/ Jitsi (formerly SIP Communicator)] (Cross-platform)
+
* [https://jitsi.org/ Jitsi (formerly SIP Communicator)] (Cross-platform)
* [http://mcabber.com/ MCabber] (Unix-like)
+
* [https://mcabber.com/ MCabber] (Unix-like)
* [http://phoenixviewer.com/ Phoenix Viewer], a Second Life client (Cross-platform)
+
* [https://www.firestormviewer.org/ Phoenix Viewer], a Second Life client (Cross-platform)
* [http://www.profanity.im/ Profanity]: [http://www.profanity.im/otr.html OTR page]
+
* [http://www.profanity.im/ Profanity]: [https://www.profanity.im/otr.html OTR page]
* [http://psi-plus.com/ Psi+] (Cross-platform)
+
* [https://psi-im.org/ Psi]/[https://psi-plus.com/ Psi+] (Cross-platform)
* [http://www.xabber.org/ Xabber] (Android)
+
* [https://www.xabber.org/ Xabber] (Android)
* [http://yaxim.org/ yaxim] (Android)
+
* [https://yaxim.org/ yaxim] (Android)
 +
* [https://zom.im/ Zom] (Android, iPhone)
  
 
=== Plugin ===
 
=== Plugin ===
* [http://gajim.org/ Gajim] (Cross-platform) with [http://trac-plugins.gajim.org/wiki/OffTheRecordPlugin Off-The-Record Encryption for Gajim]
+
* [https://gajim.org/ Gajim] (Cross-platform) with [https://dev.gajim.org/gajim/gajim-plugins/wikis/OffTheRecordPlugin Off-The-Record Encryption for Gajim]
* [http://irssi.org/ irssi] (Cross-platform) with [http://irssi-otr.tuxfamily.org/ irssi-otr]
+
* [https://irssi.org/ irssi] (Cross-platform) with [https://github.com/cryptodotis/irssi-otr/ irssi-otr]
* [http://kopete.kde.org/ Kopete] (Unix-like) with [http://kopete-otr.follefuder.org/ Kopete Off-the-Record plugin]
+
* [https://userbase.kde.org/Kopete/ Kopete] (Unix-like) with [http://kopete-otr.follefuder.org/ Kopete Off-the-Record plugin]
 
* [http://miranda-im.org/ Miranda IM] (Microsoft Windows) with [https://code.google.com/p/mirotr/ MirOTR - OTR for Miranda IM]
 
* [http://miranda-im.org/ Miranda IM] (Microsoft Windows) with [https://code.google.com/p/mirotr/ MirOTR - OTR for Miranda IM]
* [http://miranda-ng.org/ Miranda NG] (Microsoft Windows) with [http://wiki.miranda-ng.org/index.php?title=Plugin:MirOTR MirOTR - OTR for Miranda NG]
+
* [https://www.miranda-ng.org/ Miranda NG] (Microsoft Windows) with [http://wiki.miranda-ng.org/index.php?title=Plugin:MirOTR MirOTR - OTR for Miranda NG]
* [http://pidgin.im/ Pidgin (formely Gaim)] (Cross-platform) with [https://otr.cypherpunks.ca/#downloads OTR plugin for Pidgin]
+
* [https://pidgin.im/ Pidgin (formely Gaim)] (Cross-platform) with [https://otr.cypherpunks.ca/#downloads OTR plugin for Pidgin]
* [http://poez.io/ Poezio] with [http://poez.io/doc/plugins/otr.html pure-python-otr]
+
* [https://poez.io/ Poezio] with [https://doc.poez.io/plugins/otr.html pure-python-otr]
* [http://salut-a-toi.org Salut à Toi] with plugin_sec_otr.py (installed by default)
+
* [https://salut-a-toi.org/ Salut à Toi] with plugin_sec_otr.py (installed by default)
* [http://www.trillian.im/ Trillian] (Microsoft Windows) with [http://trillianotr.kittyfox.net/ Trillian OTR]
+
* [https://www.trillian.im/ Trillian] (Microsoft Windows) with [http://trillianotr.kittyfox.net/ Trillian OTR]
* [http://weechat.flashtux.org/ WeeChat] (Cross-platform) with [http://irssi-otr.tuxfamily.org/ weechat-otr]
+
* [https://weechat.org/ WeeChat] (Cross-platform) with [https://github.com/mmb/weechat-otr/ weechat-otr]
* [http://xchat.org/ XChat] (Cross-platform) with [http://irssi-otr.tuxfamily.org/ xchat-otr]
+
* [http://xchat.org/ XChat] (Cross-platform) with [https://github.com/J0s3f/xchat-otr/ xchat-otr]
 
+
=== Work in Progress ===
+
* [http://telepathy.freedesktop.org/ Telepathy Gabble]: [https://gitorious.org/jprvita-repos/telepathy-gabble/commits/otr code] : [http://blogs.gnome.org/xclaesse/2014/05/04/otr-in-empathy/ article]
+
  
 
== External links ==
 
== External links ==
Line 53: Line 51:
 
* [https://www.otr.im/ OTR.im - Whispering Off The Record]
 
* [https://www.otr.im/ OTR.im - Whispering Off The Record]
 
* [https://otr.cypherpunks.ca/software.php OTR-Enabled Software]
 
* [https://otr.cypherpunks.ca/software.php OTR-Enabled Software]
 +
* [https://github.com/otrv4/otrv4 OTRv4 draft]
 
* [https://otr.cypherpunks.ca/Protocol-v3-4.0.0.html Off-the-Record Messaging Protocol version 3]
 
* [https://otr.cypherpunks.ca/Protocol-v3-4.0.0.html Off-the-Record Messaging Protocol version 3]
 
* [https://otr.cypherpunks.ca/Protocol-v2-3.1.0.html Off-the-Record Messaging Protocol version 2]
 
* [https://otr.cypherpunks.ca/Protocol-v2-3.1.0.html Off-the-Record Messaging Protocol version 2]

Revision as of 11:40, 5 January 2019

OTR has widely been replaced by OMEMO in the XMPP network and is recommended to be used instead.

Off-the-Record Messaging, commonly referred to as OTR, is a cryptographic protocol that provides strong encryption for instant messaging conversations. OTR uses a combination of the AES symmetric-key algorithm, the Diffie–Hellman key exchange, and the SHA-1 hash function. In addition to authentication and encryption, OTR provides perfect forward secrecy and malleable encryption.

Strengths

OTR allows you to have private conversations over instant messaging by providing:

  • Encryption
    • No one else can read your instant messages.
  • Authentication
    • You are assured the correspondent is who you think it is.
  • Deniability
    • The messages you send do not have digital signatures that are checkable by a third party. Anyone can forge messages after a conversation to make them look like they came from you. However, during a conversation, your correspondent is assured the messages he sees are authentic and unmodified.
  • Perfect forward secrecy
    • If you lose control of your private keys, no previous conversation is compromised.

Client support

Native

Plugin

External links