Re: [xmpp] End-to-End Encryption Milestone

In a fit of being rubbish, I exchanged a couple of messages with Ben
directly before realising I'd not copied the list.

The first said:

I'd like to get OTR usage in XMPP documented, but I think that's an
informational document, possibly better done within the XSF.

Ben countered with: Does that mean OTR, after documentation, would be good
enough? Or is there still work for the IETF here?

I responded:

I honestly don't know. I doubt it, but OTR in XMPP is largely a matter of
fiddle-until-it-works. It's not, apparently, entirely straightforward due
to multiple resources, resource "locking", etc. Documenting it in a way
that would be useful to developers would also mean the issues surrounding
this form of encryption were laid bare, and give us some ideas of how to
tackle the problem ourselves.

Doing it within the XSF would *possibly* be simpler in terms of process.

On Fri, Feb 21, 2014 at 8:31 PM, Ben Campbell <ben@nostrum.com> wrote:

> (as chair)
>
> Hi Everyone,
>
> The XMPP working group has a milestone for "Define a solution for
> end-to-end encryption." We have not seen much activity there of late, and
> it has been suggested that we may need to delete that milestone due to
> insufficient interest and energy.
>
> Who is still interested in contributing effort to complete this milestone?
> That is, in discussion, review, and perhaps even writing drafts?
>
> Who expects to implement and/or deploy such a solution, once we have one?
>
> Are other approaches (e.g. OTR, TLS everywhere, etc) likely to be "good
> enough" that we don't need to do more work?
>
> Thanks!
>
> Ben.
> _______________________________________________
> xmpp mailing list
> xmpp@ietf.org
> https://www.ietf.org/mailman/listinfo/xmpp
>