[tor-bugs] #13757 [Tor Messenger]: Make it clearer which protocols go over Tor (all?) and which use OTR (all? for everything?)

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Nov 21 18:02:48 UTC 2014


#13757: Make it clearer which protocols go over Tor (all?) and which use OTR (all?
for everything?)
-------------------------------+----------------------
     Reporter:  karsten        |      Owner:  sukhbir
         Type:  enhancement    |     Status:  assigned
     Priority:  normal         |  Milestone:
    Component:  Tor Messenger  |    Version:
   Resolution:                 |   Keywords:
Actual Points:                 |  Parent ID:
       Points:                 |
-------------------------------+----------------------

Comment (by arlolra):

 > For example, they all go over Tor, for everything, right?

 Yes.

  > Maybe add a sentence "All protocols will be routed over the Tor
 network." to the window.  Or say "IRC over Tor", "XMPP over Tor", etc.

 Seems reasonable; I weakly prefer the former.

 > And which of these protocols support OTR?

 OTR was designed to be agnostic to the transport protocol so, ideally, all
 of them. The caveat being that it's a 2-party protocol. Maybe a line to
 the effect of, "OTR will be enabled in one-on-one conversations."

 > Is this enforced in a way that no plain-text messages will be
 transmitted?

 Yes. The default will be to enable OTR with the policy that encryption is
 required.

 > How about saying something like: "All protocols will use Off-the-Record
 messaging if available."?  Or if only some protocols support OTR, how
 about saying "IRC over Tor with OTR support"?

 We'd need to distinguish between IRC chats rooms and 1-1 conversations.
 Same for XMPP MUCs.

 > Disclaimer: I'm not a usability person.  (As if that wasn't already
 obvious.)

 Hopefully we can get researchers interested and a proper usability study.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13757#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list