Comments (4)
azadi
commented on May 29, 2024
I tested this again and another related issue will be the notification to the user that an empty answer/secret is not acceptable. Since we are avoiding modal dialogues, should we say this using a notification bar or ...?
from ctypes-otr.
arlolra
commented on May 29, 2024
See 638c48b.
from ctypes-otr.
azadi
commented on May 29, 2024
That's ... weird. So I am guessing the protocol says nothing about this?
from ctypes-otr.
arlolra
commented on May 29, 2024
SMP is verifying two strings are the same without revealing any knowledge about them. It shouldn't matter for the security of the protocol.
However, usability is another issue altogether. We should be encouraging safer behaviour.
from ctypes-otr.
Related Issues (20)
- UI for importing / exporting private keys HOT 4
- "Preferences" option in chat window
- Nudge for verification even if cancelled by user HOT 1
- Investigate top-level const/let uses re: that reference bug
- Play nicer with merged contacts HOT 5
- Generating private key process does not finish HOT 18
- Provide functionality for adding verified fingerprints HOT 1
- SMP QA shouldn't notify the responder HOT 2
- Thunderbird integration HOT 1
- UX when clicking "verify" could be improved HOT 1
- Improve fingerprint usability when adding an account HOT 7
- Unit tests HOT 1
- Cannot access add-on defaults preferences HOT 2
- Crash on connecting to a XMPP account and adding contact HOT 7
- Investigate the implications of 964070 HOT 1
- Add tests for coniks.js
- Shouldn't assume coniks was enabled when accounts were created
- Error in prefs (in tor message) HOT 11
- Add Contact's Fingerprint menu item disappears after closing contact window HOT 2
- Write an import from Transifex script
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ctypes-otr.