WARNING
This module is still in heavy development and testing. It probably does not work at all.
Name:
mod_otrPurpose:
Man in the Middle module for Off-The-Record messagingAuthor:
Olivier Goffart <ogoffart at kde.org>Type:
ModuleRequirements:
ejabberd 1.1.1, libotr-3.0.0 and one module to log messages (see bellow)Download:
mod_otr-20070329.tar.gz
This module does the Man in the Middle of the Off-The-Record protocol and messages can be logged. It can be used with mod_logmnesia, mod_logxml, or mod_log_chat (or even mod_archive).
More information in the included README.
Of course, if user checks fingerprints, they will mismatch. This module has been created in order to show that e2e (end-to-end) encryption can't be user friendly, as checking fingerprint is not user friendly).
Related Links
- Off The Record messaging
- Announcement
- Man-in-the-middle attack article at Wikipedia
user-friendliness
This doesn't "show that end-to-end encryption can't be user friendly." This shows that key verification must be performed over an authenticated medium, which is something we already knew.
There's a difference between user-friendliness and idiot-friendliness.