Opened 7 years ago

Last modified 4 years ago

#14874 new defect

Missing notification for unencrypted messages during OTR conversations

Reported by: StrangeCharm Owned by: tomkiewicz
Milestone: 3.0.0 Component: plugins
Version: 2.10.1 Keywords: otr
Cc:

Description

I do not know enough about how the OTR plugin interacts with Pidgin to know whether this is a problem with pidgin or with the OTR plugin. If you can confirm that this is not a Pidgin bug, I'll take it up with OTR and my apologies.

When an unencrypted message is received during an active OTR session, Pidgin displays that message with a clear warning that it is not encrypted:

The following message received from $USERNAME was not encrypted: [$MESSAGE]

This is excellent: it's a clear notice of the reduced security of that message, without totally concealing it. However, Pidgin does not alert for these messages, so unless the user has the conversation window open, they will not be aware of it.

It is my opinion that it would be better if pidgin created an alert for this message as usual, so that the user could view the message and make an informed decision about how to proceed. I have experienced the situation described in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=603559 several times, and do not think that this is an ideal behavior.

An even better behavior might allow for a different alert (different color/sound &c.) on receipt of unencrypted messages, but just alerting at all would be a huge improvement.

References to this issue seen elsewhere:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=603559

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=561865

http://lists.cypherpunks.ca/pipermail/otr-users/2011-June/001920.html

http://lists.cypherpunks.ca/pipermail/otr-users/2011-June/001921.html

Change History (4)

comment:1 Changed 6 years ago by tomkiewicz

  • Owner changed from rekkanoryo to tomkiewicz

comment:2 Changed 6 years ago by tomkiewicz

There is no notification, because the message is displayed with PURPLE_MESSAGE_SYSTEM flag. I think it should be displayed as a normal message and marked as a warning in some other way.

comment:3 Changed 6 years ago by tomkiewicz

  • Component changed from unclassified to plugins
  • Keywords otr added
  • Milestone set to 3.0.0
  • Summary changed from Alert on unencrypted messages during OTR conversations to Missing notification for unencrypted messages during OTR conversations

comment:4 Changed 4 years ago by chaoscommander

Are there any news on this? Has it been decided whether the plugin or Pidgin needs to change?

Note: See TracTickets for help on using tickets.
All information, including names and email addresses, entered onto this website or sent to mailing lists affiliated with this website will be public. Do not post confidential information, especially passwords!