Re: [Tails-dev] Bug#725779: libotr: OTR clients supporting b…

Nachricht löschen

Nachricht beantworten
Autor: Thibaut Varène
Datum:  
To: Ian Goldberg
CC: intrigeri, tails-dev, security, 725779
Betreff: Re: [Tails-dev] Bug#725779: libotr: OTR clients supporting both OTRv1 and v2 are subject to protocol downgrade attacks
On 23 oct. 2013, at 01:53, Ian Goldberg <ian@???> wrote:
>
> To be explicit, removing support for OTRv1 from libotr 3.x is totally
> fine (and indeed libotr 4.x has already done it).


Ian, thanks a lot for the input.
I guess it's all good then, no objection for an NMU and thanks in advance to whoever will deal with it.
I hope to be able to resume my normal DD duties ASAP ;P

T-Bone