search

amonchakai / Hg10

Hg10 -- A XMPP Client for BlackBerry 10 (aiming Google Talk)
20 stars 11 forks source link

OTR Verification - ability to verify fingerprint #71

Closed ceearrbee closed 9 years ago

ceearrbee commented 9 years ago

When using OTR there is no way to verify the identity of the other person.

Other clients do this by having you do one of a number of options:

  1. Manual Verification, this is where you confirm the other persons fingerprint itself.
  2. Ask a question, this is where you ask them a question to verify their identity.
  3. Answer a question, you answer a question they ask.

You can see more info here: https://otr.cypherpunks.ca/help/4.0.1/authenticate.php?lang=en

This is a fairly large part of confirming the security of OTR.