Hi guys, Not long ago I posted an email talking about the virtues of OTR encryption:
http://www.openoffice.org/servlets/ReadMsg?list=social&msgId=1880753 OTR is spectacular. Suppose that Romeo and Juliet want to talk, but they fear that Tybalt, who has admin access to the Capulet server, is intercepting their communication. So they choose OTR. Thanks to OTR: * Tybalt can't read their communication (encryption) even if he managed to get Juliet's private key and password (perfect forward security). * Juliet is confident she's talking to Romeo (authenticity). * But Tybalt can't prove what he said (repudiability). This is fantastic, but alas, our star-crossed lovers still have *one* fear. Tybalt may not know what they are saying, but he sees the connection, and see the IP address from whence it came! Tybalt can find the location of Romeo and plot to kill him. Enter Jabber to the rescue! Jabber uses a very cool two-server system. The Montage and Capulet family each have a server. Romeon's Jabber address is [EMAIL PROTECTED] and Juliet's is [EMAIL PROTECTED] The communication looks like this: romeo -> montague.net -> capulet.org -> juliet A message from Romeo goes to the Montage server, which sends it to the Capulet server, which gives it to Juliet. And here is the neat part. The Jabber protocol specifies that under no circunstance is the Montage server to reveal the IP address of its clients. In other words, when Tybalt sees the incomming message, the only IP he can see is that of Montage.net. Romeo's IP, and his life, are safe from Tybalt. Ain't this cool? If you're interested in getting setup with Jabber+OTR, I would be happy to help you. Cheers, -- Daniel Carrera | I don't want it perfect, Join OOoAuthors today! | I want it Tuesday. http://oooauthors.org |
