one more thing to cover before we actually use xmpp clients like pidgin or dyno, we want to talk about omimo and otr.
now these are incredibly important.
xmpp by default is not encrypted in a secure way.
so if you're just using xmpp as a basic install with a basic client, you're actually missing out on some encryption and security features that you want to make sure you have.
so let's talk about omimo and otr.
omimo is the newer standard for end- to- end encryption and can be used with xmpp.
it's based on signal, which is the app on phones that you may have heard of, their algorithm for end- to- end encryption.
and it's very easy to use and modern.
it manages key agreements automatically, meaning you don't have to share your key with somebody and they accept it and import it or anything like that.
it automatically does all of that.
every message generates a session key, meaning it does have forward secrecy, right?
if any single session key is compromised, the all of the other messages that have been sent before are not compromised, which is perfect forward secrecy.
it does have asynchronous messaging, which allows for just modern flexibility and speed, and it's the new standard that's starting to be used.
comparably, you have otr, which is also end- to- end encryption.
it's an older version of it and was one of the most widely used.
it did also have perfect forward secrecy, so different session keys every time you send a message, but it did have manual key verification and it didn't have multi- device support.
otr is slowly getting phased out.
you'll see less and less people use it.
and i imagine in the future, omimo will be the only standard going forward.
but otr can still be useful if you really only care about single chat on a single device, you're not going to do any other devices, you're not going to move devices and you don't mind manually doing the key verification part.
so we'll show you how to use both at a high level.
otr will show a little bit less of since omimo is generally just easier to use and it works very well.
that's it for this one.
see you in the next one.