Tip:
Highlight text to annotate it
X
Hello.
This short video will demonstrate how to have an Off The Record text chat with Jitsi.
You need to have Jitsi installed and configured to use your Google Account to continue.
We will now show you how to exchange text messages with your Google contacts, without
Google (or anyone else) being able to read or record
these messages. Please note - for this to work,
the person you are chatting to must also use software that supports Off The Record messaging.
Examples of such software are: - Jitsi and Pidgin for your computer
- GibberBot for your Android phone or tablet - and ChatSecure for your iPhone or iPad
To start chatting with my friend Jeeves using Jitsi, I click once on the name, and then
click on the "text" bubble icon.
The chat window pops up. I type my message in the bottom field as normal and hit ENTER
to send it to Jeeves.
(chat messages follow:) (Hi)
(Hi there) (Ready for an Off The Record conversation?)
(Sure!)
The messages we have just exchanged were not protected by Jitsi in any way, and have been
recorded by Google or any other service provider we
happen to be using (like Facebook or Yahoo!).
See the LOCK icon on the top right corner? Its description is "Encrypt chats with OTR".
OTR stands for "Off The Record". It's a method to ensure that nobody else can
read your messages, now or in the future. If you want to find out more about the unique
properties of OTR and "Perfect Forward Secrecy", visit
the website cypherpunks.ca/otr
Clicking the LOCK icon initiates a private conversation with our friend. Anything we
type from now on is only readable by the two of us.
Notice that Jitsi warns us that we have not yet verified the identity of the person we're
messaging. The LOCK icon is shut, but it still has an
amber warning triangle in it.
Clicking on the "authenticate Jeeves" link shows us his fingerprint. This is equivalent
to the identifying signature of the person we're chatting with.
I then ask Jeeves to verify that this is in fact, his fingerprint.
This should be done by a phone call, an encrypted voice call with Jitsi, a digitally signed
email or just by exchanging a piece of paper next
time we meet face to face.
(chat window: "hang on, calling you on the mobile")
Once we are certain that this is his fingerprint, we select "I have verified that this is in
fact the correct fingerprint for Jeeves" and then
click on "Authenticate buddy".
Notice that the yellow warning triangle is now gone from the LOCK icon, which simply
displays a "shut" or "secure" state.
We only have to verify the identify of our friends once. Next time I want to chat to
Jeeves, I will only need to click on the "lock" icon
and we can start chatting away!
Congratulations! You have just had your first truly private text conversation, without anyone
recording what you discuss with your friends online.