Author: Thibaut Varène Date: To: Ian Goldberg CC: intrigeri, tails-dev, security, 725779 Subject: Re: [Tails-dev] Bug#725779: libotr: OTR clients supporting both
OTRv1 and v2 are subject to protocol downgrade attacks
On 23 oct. 2013, at 01:53, Ian Goldberg <ian@???> wrote: >
> To be explicit, removing support for OTRv1 from libotr 3.x is totally
> fine (and indeed libotr 4.x has already done it).
Ian, thanks a lot for the input.
I guess it's all good then, no objection for an NMU and thanks in advance to whoever will deal with it.
I hope to be able to resume my normal DD duties ASAP ;P
