[guardian-dev] OTR4j and OTRv3

Nathan of Guardian nathan at guardianproject.info
Thu Jan 10 21:49:19 EST 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/10/2013 09:04 PM, Eleanor Saitta wrote:
> both of them. Also, as folks have mentioned, there are other users of
> OTR4J who we (OpenITP) would like to see brought forward too. While
It is settled then, we will be a champion for OTR4J, which in the case
of diversity, is also good because it is built on BouncyCastle and not
OpenSSL.

There are currently a few variations between our work on OTR4J (which is
currently embedded in Gibberbot) and the standard OTR4J project, which
was recently moved from Google Code to Github. While they have
integrated our work on SMP, we haven't kept entirely in sync. In
addition, we have some additional code for use on Android, and soon for
storage of the keystore in SQLCipher/IOCipher.

This if the official project by the original author:
http://github.com/gpolitis/otr4j

however, this is the most active fork: https://github.com/redsolution/otr4j

We should figure out which project the Jitsi team is basing their work
on. There is also Xabber, the now (soon?) open-source Android XMPP
client that also supports OTR, though a brief audit of that app shows a
number of problems with their default configuration (SSL cert
verification off, all chats persisted, etc).

+n


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=bb8Q
-----END PGP SIGNATURE-----



More information about the Guardian-dev mailing list