Skip to content

ChatSecure tries to initiate an OTR session even when an OMEMO session has already been established  #788

Description

@Spydar007

This is probably going to be a duplicate of something else.

I have had it confirmed from numerous contacts that, when the "Best Available" option is selected, ChatSecure keeps attempting to (so much that it spams the chat) initiate an OTR session even after an OMEMO session has been established.

To stop it, you have to change the Encryption Settings to be "OMEMO" only.

Activity

  1. added this to the 4.1 milestone on Jun 17, 2017
  2. chrisballinger commented on Jun 17, 2017

    @chrisballinger
    Member

    Ah yes, I meant to change this default in v4.1.0 because OTRDATA file transfer is no longer needed now that we have XEP-0363. Thanks for the reminder.

  3. link2xt commented on Jun 25, 2017

    @link2xt

    @chrisballinger XEP-0363 is just uploading files to web server and transferring a link. It is not encrypted. OTRDATA file transfer is end-to-end encrypted.

    Before switching to XEP-0363 this problem should be solved, for example by encrypting files and transferring a key in message along with the link.

    Edit: I see that #736 has aesgcm:// item, cool.

  4. afriedmanGlacier commented on Jun 27, 2017

    @afriedmanGlacier
    Contributor

    I pulled a file over from our server that was sent with HTTP Upload using OMEMO and it said "The file ... could not be opened" and "It may be damaged or use a file format that Preview doesn't recognize" so, I'm thinking its encrypted for us though I'm not sure if there is anything else to check

  5. chrisballinger commented on Jun 27, 2017

    @chrisballinger
    Member

    The transfers are encrypted as long as you aren't using "plaintext" mode.

  6. ronnicek commented on Aug 21, 2017

    @ronnicek

    Hi,

    yep, I see still error like in #611.

    OMEMO is on on both clients and other side is getting following from me:

    **Unencrypted** ?OTRv23?
    <b>[email protected]</b> has requested an <a href="/api/browser/proxy?url=https%3A%2F%2Fotr.cypherpunks.ca%2F">Off-the-Record private conversation</a>.  However, you do not have a plugin to support that.'
    
  7. therob84 commented on Oct 4, 2017

    @therob84

    Is dropping OTR support in ChatSecure on the roadmap? I already heard this for Conversations' in some discussions thereover....CS should/could follow in this case to further minimize error causes and confusion about different encryption methods...

  8. chrisballinger commented on Oct 4, 2017

    @chrisballinger
    Member
  9. therob84 commented on Jan 25, 2018

    @therob84

    Mayne it is conected to this issue: between a ChatSecure contact and my gajim client (in parallel with an conversations client) frequently I get (error/notification) messages "OTR message which my client does not support" at gajim sent by chatsecure, although there is a working omemo connection...
    The OTR messages (I can paste the quote tmrw) are sent "in background", means without the contact did sent any payloaded message from CS (thus due to some status/typing/chat markers or anything else going on in session establishing in CS?) . I only get this in gajim, but not in Conversations (both connected to my same account). Quite annoying.

  10. chrisballinger commented on Jan 26, 2018

    @chrisballinger
    Member

    I thought this was fixed already :(

  11. therob84 commented on Jan 26, 2018

    @therob84
  12. chrisballinger commented on Jan 26, 2018

    @chrisballinger
    Member
  13. therob84 commented on Jan 26, 2018

    @therob84

    No.
    I am not using iOS (only Conversations@Android, Gajim@Windows).
    I just asked some friends to use CS@iOS and thus are limited in advices to them, just helping with problems and convincing them in continue using XMPP with me :-/

  14. Echolon commented on Feb 6, 2018

    @Echolon

    Hi, yes - I'd like to support the approach at least prevent CS to establish OTR automatically and instead enforce omemo. Furthermore, I experienced that the menu with settings for encryption is kinda hidden and not very easy to handle with all these abilities who encryption should be prioritised (for a normal user).

    (The first thing leads in Conversations to the situation that it asks me all the time to verify OTR session...)

    Cheers

  15. therob84 commented on Feb 12, 2018

    @therob84

    And onother OTR issue, maybe connected to this one:

    My contacts using ChatSecure (4.2.1) occasionally receiving messages like ?OTR Error:null although I definetively did not initiate any OTR sessions in Conversations & Gajim from my side. I never use OTR and the CS contacts complaining regularly about OTR-error-messages. :-/

    I do hope for improvements in a coming release (any projected release-date yet, @chrisballinger?).

  16. jotwewe commented on Mar 27, 2018

    @jotwewe

    I got the same messages as described in #788 (comment) from a client using chatsecure 4.2.1, until he switched from "best available" encryption to "OMEMO only".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions