Re: [Stox] OTR encryption between SIP and XMPP

Peter Saint-Andre <stpeter@stpeter.im> Wed, 18 September 2013 14:15 UTC

Return-Path: <stpeter@stpeter.im>
X-Original-To: stox@ietfa.amsl.com
Delivered-To: stox@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE94B11E82E8 for <stox@ietfa.amsl.com>; Wed, 18 Sep 2013 07:15:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.124
X-Spam-Level:
X-Spam-Status: No, score=-102.124 tagged_above=-999 required=5 tests=[AWL=-0.395, BAYES_00=-2.599, SARE_MLH_Stock1=0.87, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h3heWxRU+Y2w for <stox@ietfa.amsl.com>; Wed, 18 Sep 2013 07:15:20 -0700 (PDT)
Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id B7B5E11E811E for <stox@ietf.org>; Wed, 18 Sep 2013 07:15:20 -0700 (PDT)
Received: from sjc-vpn6-917.cisco.com (unknown [128.107.239.233]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id 7C08B4169C; Wed, 18 Sep 2013 08:20:10 -0600 (MDT)
Message-ID: <5239B578.10208@stpeter.im>
Date: Wed, 18 Sep 2013 08:15:20 -0600
From: Peter Saint-Andre <stpeter@stpeter.im>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: Adrian Georgescu <ag@ag-projects.com>
References: <9DFE605A-134A-4C41-B903-8C9955E61396@ag-projects.com>
In-Reply-To: <9DFE605A-134A-4C41-B903-8C9955E61396@ag-projects.com>
X-Enigmail-Version: 1.5.2
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: "stox@ietf.org" <stox@ietf.org>
Subject: Re: [Stox] OTR encryption between SIP and XMPP
X-BeenThere: stox@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: SIP-TO-XMPP Working Group discussion list <stox.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/stox>, <mailto:stox-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/stox>
List-Post: <mailto:stox@ietf.org>
List-Help: <mailto:stox-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/stox>, <mailto:stox-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Sep 2013 14:15:25 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 9/13/13 6:42 AM, Adrian Georgescu wrote:
> Hello,
> 
> I am not sure if this is relevant to any of the deliverables of the
> working group, but just in case it is, we were able to create
> end-to-end encryption for chat sessions using OTR protocol
> http://www.cypherpunks.ca/otr/  between a SIP client using MSRP
> (that is Blink) and XMPP client (Jitsi).
> 
> The implementation is described here:
> 
> http://projects.ag-projects.com/projects/blinkc/wiki/OTR

Cool!

Given that OTR is an "over-the-top" encryption method that's agnostic
about the underlying messaging transport, it does seem like a
reasonable approach. I'm not sure whether we need or want to say
anything about that in draft-ietf-stox-chat.

Peter

- -- 
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=204U
-----END PGP SIGNATURE-----