Add (global) option to disable OMEMO (#201)
wojciech.kapcia@tigase.net opened 5 years ago

Some may not want to use OMEMO so it would be good to have option to disable it:

  • remove option to start encrypted connection
  • (somehow) prevent other party from sending us encrypted messages (@andrzej.wojcik - you suggested automatic replying with "Don't send encrypted messages" but maybe we could either remove our keys or influence OMEMOv2 to handle this usecase?)
Andrzej Wójcik (Tigase) commented 5 years ago

@wojtek I've looked over OMEMO specification, PubSub specification and discussed that with Daniel and even if we would remove our OMEMO keys (Beagle/Siskin) there may still be some other key (or will be published when any other OMEMO compatible client published its key on your account). And if there is at least one key another side may try to send encrypted message to you.

At this point, I'm wondering if we should not add a server side feature, which would just respond with an error on incoming OMEMO message and at the same time would not allow any of your clients to publish OMEMO keys at your PEP service.

What do you think? Simple blocking and responding with an errpr as I've suggested would also work but it would not enforce that behavior and would store those messages in MAM archive.

wojciech.kapcia@tigase.net commented 5 years ago

Maybe we could set max_items for OMEMO nodes? That should effectively prevent anyone from publishing there?

Though not sure anymore it we want to fight it.

Andrzej Wójcik (Tigase) commented 4 years ago

@wojtek I think, we do not want to do that. At least not now and it could make some issues with other clients not knowing how to reenabled OMEMO.

How about blocking any OMEMO message and responding that we do not want "encrypted" communication?

wojciech.kapcia@tigase.net commented 4 years ago

tbh I'm not sure now. That could send bad-PR (look, they are gains encryption, boo-hoo). I don't see any straightforward way of preventing using OMEMO for now…

Andrzej Wójcik (Tigase) commented 4 years ago

In this case, I'm closing the issue with "Won't Fix" resolution.

issue 1 of 1
Type
New Feature
Priority
Normal
Assignee
Version
4.0
Spent time
45m
Issue Votes (0)
Watchers (0)
Reference
tigase/_clients/beagle-im#201
Please wait...
Page is in error, reload to recover