full-disclosure - Re: Skype chat encryption with OTR

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 19 Jun 2008 13:00:49 +1000
From: rawket <r4wk3t@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Skype chat encryption with OTR

Yeah its encrypted, Public AND Private keys are stored on Skype's server.
Although this is great, and provides the user with an encrypted 
conversation (voice or text) wherever he/she is in the world - it means 
all the keys are stored in 1 location and can be intercepted by either 
Skype or the feds heh...

 >> /end-to-end deniable encryption for Skype chat messages.

/There is no denying that an OTR Conversation has been encrypted.. Its 
because the private keys change ultra-frequently, and the keys are short 
lived that it provides the 'plausible deniability'

Even with OTR, theres no need to send your private conversations through 
skype's servers. You should use OTR with a trusted jabber server.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/