The OMEMO dev’s push to get many clients to drop OTR support has seriously fragmented the XMPP world :(
It seems like there must be a modern client that supports both OTR and OMEMO, but, I haven’t found one.
The OMEMO dev’s push to get many clients to drop OTR support has seriously fragmented the XMPP world :(
It seems like there must be a modern client that supports both OTR and OMEMO, but, I haven’t found one.
Yeah, there are IRC clients that support OTR for private (1:1) messages, and there are IRC to XMPP gateways… i’ve never done it myself but I have heard of people using cross-protocol OTR that way. I’m not aware of any other cross-protocol e2ee system.
poezio’s OTR support comes from potr which unfortunately relies on pycrypto which says it is “unmaintained, obsolete, and contains security vulnerabilities”. Its its OMEMO support comes from poezio-omemo which uses python-xeddsa which says “This code was not written by a cryptographer and is most probably NOT SECURE”. I haven’t looked very closely but I think python-xeddsa might actually be OK; it has some (barely) post-covid commits and is built using primitives from djb’s SUPERCOP, but pycrypto is definitely dead and should not be used anymore.