Off-the-Record plugin, SHA-1 or SHA-2?
Hey everyone at LQ,
Iíve being digging around the net for some clarification about the Off-The-Record plugin for Pigdin (and other IM's).
Basically i want to know if it uses the SHA-1 or SHA-2 hash function. Some might say iím wearing my tin foil hat but the SHA-1 was cracked in 2005 and as far as i know SHA 2 is much more secure.
Wikipedia states it's SHA 1 and the authors of the OTR plugin mention both SHA-1 and SHA-2 in their documentation, and i couldnít find an active pidgin forum (could only find the archived pigdin forums on sourgeforge)
Unless their's a better method to use IM securely?