[jitsi-dev] feature request: otr and logging


#1

Hello

I would like to make a suggest for a new option in Jitisi

1) Have a setting option that makes jitsi stop logging when OTR is turned on
2) When OTR is turned on, send a message to other person your logging status

example:
"OTR has been enable, logging on <myIMname> client is turned <OFF/ON>"


#2

This won't help at all, as it is trivial to remove this line of code
if you have bad intentions. Will just create a false feeling of security.

- --
Yannik V�lker

···

Am 24.10.2013 18:37, schrieb ml lists:

Hello

I would like to make a suggest for a new option in Jitisi

1) Have a setting option that makes jitsi stop logging when OTR is
turned on 2) When OTR is turned on, send a message to other person
your logging status

example: "OTR has been enable, logging on <myIMname> client is
turned <OFF/ON>"


#3

This won't help at all, as it is trivial to remove this line of code
if you have bad intentions. Will just create a false feeling of security.

It's an opt in setting. I am more concerned whith loggin being disable on
my end when i have otr on.

I live in repressive regime, my contact does not. If my computer get take
I do not want log of OTR conversation but I do want some non OTR log. <Yes
I take other precaution to protect data but every layer help>

I am aware I can not control other end. there are also many more client
than jitsi so most likely I can not have any guarantee of log their ends

···

On 24 October 2013 17:35, Yannik Völker <yannikv@yahoo.de> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 24.10.2013 18:37, schrieb ml lists:
> Hello
>
> I would like to make a suggest for a new option in Jitisi
>
>
> 1) Have a setting option that makes jitsi stop logging when OTR is
> turned on 2) When OTR is turned on, send a message to other person
> your logging status
>
> example: "OTR has been enable, logging on <myIMname> client is
> turned <OFF/ON>"
This won't help at all, as it is trivial to remove this line of code
if you have bad intentions. Will just create a false feeling of security.

- --
Yannik Völker
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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=p72E
-----END PGP SIGNATURE-----

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#4

Hello,

1) Have a setting option that makes jitsi stop logging when OTR is turned

on

We are glad to say that this feature has already been implemented in the
newest version of Jitsi. Unfortunately, this version is not released yet.
However, feel free to download and install one of the latest nightly builds
from Jitsi's homepage here: https://jitsi.org/Main/Download#latestnightly so
that you can enjoy this feature.

2) When OTR is turned on, send a message to other person your logging

status

As Yannik Völker said, this will most probably just create a false feeling
of security.
It will really be very easy for the opposite side to fake not logging the
conversation.

If you have any further question regarding this topic, please feel free to
ask them anytime.

Regards,
Marin

···

On Thu, Oct 24, 2013 at 8:54 PM, ml lists <mlists0001@gmail.com> wrote:

> This won't help at all, as it is trivial to remove this line of code
> if you have bad intentions. Will just create a false feeling of security.

It's an opt in setting. I am more concerned whith loggin being disable on
my end when i have otr on.

I live in repressive regime, my contact does not. If my computer get
take I do not want log of OTR conversation but I do want some non OTR log.
<Yes I take other precaution to protect data but every layer help>

I am aware I can not control other end. there are also many more client
than jitsi so most likely I can not have any guarantee of log their ends

On 24 October 2013 17:35, Yannik Völker <yannikv@yahoo.de> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 24.10.2013 18:37, schrieb ml lists:
> Hello
>
> I would like to make a suggest for a new option in Jitisi
>
>
> 1) Have a setting option that makes jitsi stop logging when OTR is
> turned on 2) When OTR is turned on, send a message to other person
> your logging status
>
> example: "OTR has been enable, logging on <myIMname> client is
> turned <OFF/ON>"
This won't help at all, as it is trivial to remove this line of code
if you have bad intentions. Will just create a false feeling of security.

- --
Yannik Völker
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)

iQIcBAEBAgAGBQJSaVpYAAoJEDqk81AiCyXKmiIP/3sPLFZT7Ct1gDBaKFl1PmTU
NRZuNukCtpXkoyC2xDT1AcTq2t4A/j6Kw5V7QeeBWrGvppUTkgxpTrHTZEN1rHTV
L1kudoG73iPI0WdaBe7fr1XpMMzdwE/zRUuwHtr68nPbcqsMWyQ64gOd9odbtO5+
DmvVnsHbNeAkmXzb1pRmbKe1Ve0a9eEH1kVrHjuatJuCu83rM6FT1vfVlCFYkuyU
zeMqaFBoy5uco6KNPwMpFKBPEMLfH37Qem61mDFW3HVwIJ7bx8EmHWeQkZBKgSwl
uj8GUsAh8leNoeXMXe4OkVeYVMt5ID0meKB7+Tk7xNIgwwRITebyHu4HYj6/2Uh5
M9sXrzIdf1VcG/JDgO5o6kpLuZAa0Xu/+jzo7YqIR9dyznYMjtLVNQuARM30Yx7R
DinzJMZM4lQSd4D11yF1CIjeFepI2kAakW0O/CLY/UGd4/6+xebBoQvYj9kgwF9I
zgGIg8fJUwPLKSm0k1A/RgtaXTBGCuBps15++NIsK3bpD1auiS4rO2ywmO8z0pVw
t12foNoMRTM9rExMWIwpqX9BaonON4ovVAE0Kt7QeRg7bPd1AfXGYvSLivKkmYeG
8Pzkqm3I50b5DfREXd5j078QFGX8GIXWuDpIgW7RD6Ds34tJytpGaD2ISj76567b
bifNdXuPOqruOwCBmOi1
=p72E
-----END PGP SIGNATURE-----

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#5

We are glad to say that this feature has already been implemented in the newest version of Jitsi.

This is great news to hear, thanks you

As Yannik Völker said, this will most probably just create a false feeling of security.
It will really be very easy for the opposite side to fake not logging the conversation.

Yes I understand, but as i say before it is for local security reason
not remote. I know I can not control anything remote user do.

···

On 25 October 2013 07:29, Marin Dzhigarov <marin@bluejimp.com> wrote:


#6

Jitsi already shows you whether or not your chat is being logged
locally. Isn't that what you are asking for?

Emil

···

On Fri, Oct 25, 2013 at 12:09 PM, ml lists <mlists0001@gmail.com> wrote:

On 25 October 2013 07:29, Marin Dzhigarov <marin@bluejimp.com> wrote:

We are glad to say that this feature has already been implemented in the newest version of Jitsi.

This is great news to hear, thanks you

As Yannik Völker said, this will most probably just create a false feeling of security.
It will really be very easy for the opposite side to fake not logging the conversation.

Yes I understand, but as i say before it is for local security reason
not remote. I know I can not control anything remote user do.


#7

Jitsi already shows you whether or not your chat is being logged
locally. Isn't that what you are asking for?

No, he was referring to receiving information about the logging status of
the remote side.

···

On Fri, Oct 25, 2013 at 1:16 PM, Emil Ivov <emcho@jitsi.org> wrote:

On Fri, Oct 25, 2013 at 12:09 PM, ml lists <mlists0001@gmail.com> wrote:
> On 25 October 2013 07:29, Marin Dzhigarov <marin@bluejimp.com> wrote:
>> We are glad to say that this feature has already been implemented in
the newest version of Jitsi.
>
> This is great news to hear, thanks you
>
>> As Yannik Völker said, this will most probably just create a false
feeling of security.
>> It will really be very easy for the opposite side to fake not logging
the conversation.
>
> Yes I understand, but as i say before it is for local security reason
> not remote. I know I can not control anything remote user do.

Jitsi already shows you whether or not your chat is being logged
locally. Isn't that what you are asking for?

Emil

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#8

Sort of but multi part

1) disable logging on my side when OTR is turned on (important feature)
2) let the remote user know my logging has been disable (not at
important feature)

additional
3) visually show in my client that my logging has been turn off

···

On 25 October 2013 10:23, Marin Dzhigarov <marin@bluejimp.com> wrote:

No, he was referring to receiving information about the logging status of
the remote side.


#9

We are not going to turn off logging by default because we don't believe
this is what most users want (and we ca ln happily agree to disagree on this
one)

No not by default, but have a setting (opt in) that allow logging to
be disable when OTR is turned on, when OTR is turned off logging
resumes.


#10

> No, he was referring to receiving information about the logging status

of

> the remote side.

Sort of but multi part

1) disable logging on my side when OTR is turned on (important feature)

Jitsi warns you when logging is on for an OTR chat and you can disable it
right then and there (from the chat window).

We are not going to turn off logging by default because we don't believe
this is what most users want (and we ca ln happily agree to disagree on
this one)

2) let the remote user know my logging has been disable (not at
important feature)

Not going to happen. People have already explained that this could be
harmful.

additional
3) visually show in my client that my logging has been turn off

This is what I was addressing in my previous mail. It is already
implemented in the nightlies

--sent from my mobile

···

On 25 Oct 2013 12:33, "ml lists" <mlists0001@gmail.com> wrote:

On 25 October 2013 10:23, Marin Dzhigarov <marin@bluejimp.com> wrote:

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#11

OK. Understood. Personally, I don't think we are likely to do
something like this in the foreseeable future. We could potentially be
interested in a patch.

Emil

--sent from my mobile

···

On Fri, Oct 25, 2013 at 1:00 PM, ml lists <mlists0001@gmail.com> wrote:

We are not going to turn off logging by default because we don't believe
this is what most users want (and we ca ln happily agree to disagree on this
one)

No not by default, but have a setting (opt in) that allow logging to
be disable when OTR is turned on, when OTR is turned off logging
resumes.