06.06.2013 07:32, Jacob Appelbaum пишет: > Hans-Christoph Steiner: >> Nadim Kobeissi >>> >>> Hi everyone, >>> We've been working on the first implementation of OTR file transfer, using >>> the extra symmetric keys afforded in the latest update to the OTR >>> specification. >>> >>> We've come up with a spec draft, you should check it out! >>> https://github.com/cryptocat/cryptocat/wiki/OTR-Encrypted-File-Transfer-Specification >>> >>> Thanks, >>> NK >> >> Glad to see progress on this. We're currently debating whether to start with >> this spec, or develop a file transfer method that is in the OTR band rather >> than in the XMPP band like XEP-0047. Being in the OTR band seems like it >> would provide extra benefits of hiding more meta data, like the fact that a >> file is being transferred, the rough size of the file, etc. >> > > This was done as a GSoC project once, long ago, I believe.
Not quite - the transfer was performed in-band and only for smaller files: those which will fit into single TLV message. Also code quality wasn't good enough to be merged into mainline. > >> Having the file transfer happen in the OTR band could provide a fully hidden >> file transfer method by combining things like randomized padding and packet >> size quantization, as well as slaving transfer timing to actual messaging >> patterns or other such ways of hiding the file transfer timing. >> > Even if we opt-in for oob transfer for larger files I still think that we should send small files in-band. cheers, Max.
signature.asc
Description: OpenPGP digital signature
_______________________________________________ OTR-dev mailing list [email protected] http://lists.cypherpunks.ca/mailman/listinfo/otr-dev
