News -
Downloads -
Mailing Lists -
Documentation -
Frequently Asked Questions -
Press
- 5 Nov 2005
- otrproxy-0.3.1 released. Changes from 0.3.0:
- Support for OTR protocol version 2; will still interoperate with
version 1 clients (though with a warning to the user).
- Handle non-ASCII charsets properly.
- 5 Nov 2005
- gaim-otr-3.0.0 and libotr-3.0.0 released. Changes from 2.0.2:
- Support for OTR protocol version 2; will still interoperate with
version 1 clients (though with a warning to the user).
- The OTR button now has a right-click context menu with some useful options.
- The OTR button now has icons in addition to text to indicate what state
a conversation is in.
- Most popups have been changed to inline messages in the conversation window.
- 5 Nov 2005
- The identity-binding flaw pointed out earlier has been fixed in
version 2 of the OTR Protocol.
- 24 Jul 2005
- Flaw in OTR protocol discovered: Well, this is the benefit of open protocols and open source. :-)
Researchers from the Universita di Cantania (Italy) and IBM have looked
at the OTR protocol, and pointed out a flaw, but there's a simple workaround
for now.
- 15 Jul 2005
- Notice to Tiger iChat users:
OS X version 10.4.2 seems to fix bug #4120243, so iChat can once again
be used with otrproxy (via the HTTP proxy).
- 16 Jun 2005
- Paul has created Fedora Core 4 rpms of libotr and gaim-otr, for
- 16 May 2005
- Notice to Tiger iChat
users: it has come to our attention (mid-May 2005) that the Tiger
version of iChat continues to have the bug that existed in Panther
(#3930228) which prevents it from connecting to a localhost SOCKS or
HTTPS proxy. In addition, there is a new bug in Tiger (#4120243) which
prevents
iChat from using an HTTP proxy at all. As a result, the Tiger
version of iChat is completely unable to use a localhost proxy, and so
will no longer work with otrproxy. This is very unfortunate, and the
only workaround at the moment is to stick to Panther, or to use a
different IM client. If you choose the latter, note that Adium X now supports OTR natively;
there is no need to use otrproxy with it.
- 4 May 2005
- We have checked yesterday's releases into CVS at
SourceForge. We'll
use that as our master repository from now on. Feel free to start using
the bug
/ patch
/ feature
request trackers there, too.
- 3 May 2005
- otrproxy-0.3.0 released. Changes from 0.2.0:
- Worked around a bug in Trillian that sometimes prevented it from
connecting to the AIM/ICQ network through otrproxy.
- New per-buddy configuration available by double-clicking a buddy's
name in the main OTR window.
- Popups on Win32 now actually show up in front of other windows.
- 3 May 2005
- gaim-otr-2.0.2 and libotr-2.0.2 released. Changes from 2.0.1:
- Fix to co-exist more nicely with other encrypting gaim plugins.
- gaim-otr is now autoconfiscated, thanks to Greg Troxel.
- 3 May 2005
- Adium X 0.80 is out, with native support for OTR!
- 3 May 2005
- OTR is now in Debian unstable. Enjoy the magic of apt-get!
- 24 Feb 2005
- otrproxy-0.2.0 released. Changes from 0.1.x:
- There's now a GUI! See the README for more details.
- 23 Feb 2005
- gaim-otr 2.0.1 released. Changes from 2.0.0:
- Removed people without fingerprints from the Known Fingerprints list.
- The column heads in the Known Fingerprints list cause sorting to
happen in the expected way.
- 22 Feb 2005
- Nikita made a 0.1.2 version of otrproxy for OSX. Changes from 0.1.1:
- AIM screen names should be compared case- and space- insensitively.
- 16 Feb 2005
- Version 2.0.1 of libotr released. Changes from 2.0.0:
- Don't send encrypted messages to a buddy who has disconnected his
private connection with us.
- Don't show the user the "the last message was resent" notice if the
message has never actually been sent before.
- Fix a crash bug that happened when messages were retransmitted under
certain circumstances.
- 8 Feb 2005
- Version 2.0.0 of libotr released. Changes from 1.0.4:
- Machine-readable records can now be attached to Data Messages inside
the private channel.
- New OtrlUserState datatype encapsulates private keys and known
fingerprints, instead of having a single global list.
- Added libotr.m4 for helping to autoconfiscate packages that use libotr.
- Resend the last message if it caused a re-keying.
- New OtrlPolicy datatype allows you to specify a per-connection OTR
policy: never use OTR, OTR only if manually requested, automatically
start OTR if possible, refuse to not use OTR.
- Version 2.0.0 of gaim-otr released. Changes from 1.0.3:
- Clicking the OTR button produces a notice in the conversation window
that it's doing something.
- Added default and per-buddy policy selection: never use OTR, OTR only
if manually requested, automatically start OTR if possible, refuse to
not use OTR.
- The OTR: button disappears if a particular buddy is set to never use OTR.
- Resend the last message if it caused a re-keying.
- OTR control messages are no longer displayed as if they were received
as IM messages.
- New multi-page UI
- Send a control message to your buddy if you terminate a private
conversation with him.
- Updated gaim-otr to match libotr 2.0.0 API.
- Separated gtk-specific code from general gaim code, with help from
Evan Schoenberg.
- 2 Feb 2005
- Version 1.99.0 of libotr and gaim-otr released. This is a preview release
for 2.0.0.
- 22 Jan 2005
- Version 1.0.4 of libotr released. Changes:
- Initial autoconfiscation, thanks to Greg Troxel.
- Log, but otherwise ignore, unrecognized OTR messages.
- 19 Jan 2005
- Version 0.1.1 of otrproxy released. Changes:
- The memory bug that caused crashes with the HTTP proxy has (hopefully)
been found and fixed.
- Added an OSX package
- 18 Jan 2005
- Version 1.0.3 of libotr released. Changes:
- The library has been separated from gaim-otr, so that other programs
can use it without having to install gaim-otr.
- We may as well try to use the "tag" method of checking for OTR, even
when we don't already know a fingerprint for the correspondent.
- Refactored the logic parts of gaim-otr into libotr, so they can be
shared by other libotr-enabled apps.
- Version 1.0.3 of gaim-otr released. Changes:
- The library has been separated from gaim-otr, so that other programs
can use it without having to install gaim-otr.
- Generate private keys automatically, if needed. Show a Please Wait
dialog while this is happening.
- Version 0.1.0 of otrproxy released. This is the first release.
- 21 Dec 2004
- Version 1.0.2 released. Changes:
- If a Man-in-the-Middle steals both Alice's and Bob's DSA private keys,
he can perform a birthday attack to try to get his session id with
each end to match. Since the session id was only 64 bits long, his
work was only 2^32, which is not enough. We now make the session id
the whole SHA-1 hash, instead of truncating it, to protect against
even this unlikely scenario.
- Made otr_sesskeys output the calculated public key as well, for added
ease of forging messages when you don't know any plaintext.
- 18 Dec 2004
- Off-the-Record Messaging was accepted to the CodeCon 2005 conference.
- 16 Dec 2004
- Mentioned on Slashdot.
Nikita Borisov, Ian Goldberg