Version: (using KDE KDE 3.4.0) Installed from: Compiled From Sources I really like to send encrypted messages and and for IM's it may be more important that after the chat session these messages cannot be be decrypted by anyone else, not even by yourself. There is also a plugin available for Gaim and it would be great if they would be compatible to each other. This would really push a standard and maybe more IMs would integrate it. This is straight from their homepage and describes best what it does: http://www.cypherpunks.ca/otr/ Off-the-Record (OTR) Messaging allows you to have private conversations over instant messaging by providing: Encryption No one else can read your instant messages. Authentication You are assured the correspondent is who you think it is. Deniability The messages you send do not have digital signatures that are checkable by a third party. Anyone can forge messages after a conversation to make them look like they came from you. However, during a conversation, your correspondent is assured the messages he sees are authentic and unmodified. Perfect forward secrecy If you lose control of your private keys, no previous conversation is compromised.
Kopete has already a cryptography plugin. The only protocol which has a standard is Jabber, (with the JEP 0027). And Kopete support it, and you should able to communicate with every jabber client. In my opinion, you should use the Jabber protocol, and tell your friend you want to talk with to use Jabber. (The crypte plugin works with all protocol, but the compatibility with others client is only assured with Jabber) I'm not going to implement this myself. (Or maybe in a very far future)
It was just a wishlist and I would like to see it. There are two problems. Problem number one is that Jabber is not used by most of the people around the world. Another point is that the integrated plugin is PGP based and setting this up under Windows is not easy for a newbie. Thanks for answering it anyway, I can still hope :)
I did some testing with GPG again and it works ok though the setup can be quite a pain and most people just want to click on encryption before creating a key manually and exchanging them etc. I want to stress once more that OTR was created for IMs and is perfect for encrypting messages over IMs. Also in the Kopete manual you state the following: "Since anyone who has the recipient's public key can encrypt to him/her, it is possible that your message could be replaced en route by a completely different message, and the recipient would not know." This also cannot happen with OTR as described in one of my previous messages. I know you want to stick to standards but this could become a new standard which could be enforced in the OpenSource world and everyone would benefit from it.
Encryption guarantees only the destination can read. Signing guarantees the sender is who he says he is. When you couple both, you can't intercept mid-way and you can't replace the message either.
I'd like OTR support too, for simple compatibility reasons. OTR plugins exist for gaim and adium, while the only other clients for which openpgp plugins exist are old versions (<5) of MSN messenger. Of course one can encrypt and decrypt it manually with pgp, but that's a real pain in an IM conversation. I'm willing to have a go at coding it myself if someone has a good explanation of how kopete plugins work (there's a little in plugin.h, but not really enough, a "Kopete plugin HOWTO" would be very much appreciated)
Since I filed this bug of course I agree with Michael. There are several advantages over the crypto plugin in Kopete, most important that you barely can use it with anyone else. I wished more programs would use it but it's a fact that no popular programs implent it. Gaim and Adium supports it, there are lots of windows users using Gaim and Adium is quite popular on the Mac. I wished I could help more Michael. Afaik the only docs available are these "make apidox". You can also join the #kopete irc channel on irc.freenode.org Personally I would love to see this plugin become reality.
I'd would be happy to implement it, but I've never done any qt/kde/kopete development. i am currently looking at the kopete and cryptography pluggin code. if any of the developers would want to guide me through it i would be happy to do the dirty work.
*** This bug has been confirmed by popular vote. ***
I'm happy to leave it to you then Anatoly if that's ok, since although I've done some Qt/KDE stuff I'm not familiar with kopete and I'm a bit busy with exams. All I can suggest as far as guidance is the IRC channel, see if you can find someone there to help. Feel free to email me if there's anything you want me to lend a hand with.
*** Bug 119478 has been marked as a duplicate of this bug. ***
*** Bug 129412 has been marked as a duplicate of this bug. ***
I would also like kopete to support otr.
In terms of interoperability a otr-plugin would be blessing for kopete. Otr is on it´s way to become the current standard for im-crypto. Crypto should be and will become a ko-criteria in choosing a favourable im-client. The major multi-protocol clients like miranda, trilian, gaim and adium x already support otr. Kopete can not afford ignoring that situation as it directly competes with gaim on the unix-platform. In order to take its position in the upcoming crypto-im-network kopete must not lack of otr-support. The plugin´s development should not be neglected. As there is no acceptable way to use otr´s proxy-feature with kopete (http://lists.cypherpunks.ca/pipermail/otr-users/2005-October/000390.html) it is even more delicate. Jake announced to start the work: http://www.kde-forum.org/artikel/14785/kopete-Off-the-Record-Plugin.html Maybe I can contribute to it, even I´ve never done some serious qt/kde-development yet and should focus on my mastertheses ;-)
Support for gaim-encryption would also be a (great) option...
For Alex's comment, you may consider bug 105902 or 132388. Sven is right in that we are dragging behind on OTR.
Seriously, this feature is NEEDED. There is no way at the moment to talk across an encrypted line with for example Miranda (except with Gaim, and I don't like Gaim along with many others:)). Miranda has OTR support, but no gpg support with the new 0.6.7 unicode version. Please could someone fix OTR support for Kopete? This is really a much wanted feature, and is going to be so much more later on. I think OTR is going to be the standard for encryption later on. This is the forum thread: http://www.kde-forum.org/thread.php?postid=62370 (double posted this on the other bug, sorry)
Good news! http://www.kde-look.org/content/show.php?content=55002
As there is now kopete-otr available, I think this bug can be closed. Thanks! BTW: kopete-otr works great without any manual intervention with GAIM/AdiumX users. Haven't tried others yet.
will it be part of KDE 3.57?
Closing this bug since the new OTR plugin is working really well. (http://www.kde-look.org/content/show.php?content=55002) Thanks a lot again for all the people that were involved.
Would be great, if it could be added to the default install :)
Also I am interested into getting this plugin into the official version. But I think there are too many open bugs right now. I received quite a few reports in the last time that in my opinion need to be fixed before a merge. Probably with 0.4 or 0.5 I'm ready... Whats your opinion? Is there any chance to go into the official version in the future?
It need to be proted to KDE4. You can already import it into kdeplayground module, and benefit of the KDE infrastructure. If it is stable enough, there is no reason it can't be include in the default install. (Or maybe in kdeaddons or kdeextragear)