Excerpts from Kjell Braden's message of 2010-10-03 16:10:39 +0200:
>   that behavior is correct. The "question and
> answer"-style-authentication is not supposed to set the trust level on
> both sides, but rather on the side that posed the question.

Oh, I see, it's not assumed that both sides trust the question!
Thanks for the clarification. Maybe a note about this case should be made in
UPGRADING.

-pesco
_______________________________________________
OTR-dev mailing list
[email protected]
http://lists.cypherpunks.ca/mailman/listinfo/otr-dev

Reply via email to