[Psi-Devel] Off-the-Record messaging for Psi

Kevin Smith kevin at kismith.co.uk
Mon Oct 8 06:38:49 PDT 2007


On 8 Oct 2007, at 14:31, Timo Engel wrote:
>> Is that exposed in this plugin? I've not noticed any client
>> presenting keys for oob verification before (in fact, Psi is one of
>> the relatively few clients that does SSL cert checking).
>
> The OTR-Plugins for Psi and Gaim store a list of known  
> fingerprints. If a
> contact requests a secure OTR-connection with a different  
> fingerprint (e.g. in
> case of a man-in-the-middle attack) a warning is shown to the user.

I take it back and apologise then.

/K


More information about the Psi-Devel mailing list