Semantic search
- Chameleon Addon
- Chameleon is a WebExtension port of the popular Firefox addon Random Agent Spoofer. The UI is near identical and contains most of the features found in the original extension.
- Cjdns
- Cjdns implements an encrypted IPv6 network using public key cryptography for address allocation and a distributed hash table for routing. This provides near zero-configuration networking without many of the security and robustness issues that regular IPv4 and IPv6 networks have. Hyperboria is the largest cjdns network, with hundreds of active nodes around the world.
- ClassyShark3xodus
- Checks apps for code signatures of known trackers (provided by Exodus). Also can list all classes for launchable (via the app drawer) packages. Can be used against any APK: - installed: via an app manager, - downloaded: via any file manager (long press and open with ClassyShark3xodus), - launchable installed: via the first screen list (long press to list all classes, including obfuscated ones). Note: doesn't work on odexed/system packages (it's a work-in-progress). Finally, the app doesn't sync or connect to the Internet and thus cannot sneak on end users. The app is updated when Exodus updates their list of trackers: https://reports.exodus-privacy.eu.org/api/trackers ClassyShark3xodus is based on Google's ClassyShark: https://github.com/google/android-classyshark
- Conversations.im
- Conversations is a Jabber/XMPP client for Android 5.0+ smartphones that has been optimized to provide a unique mobile experience. A port to iOS is envisaged in the medium-term future. Conversations allows you to easily send images, show if your contact has received and read your message, permit dynamic history and handles multiple devices (especially sync with desktop clients), allow you to create group chats and support one-to-one Audio/Video calls ! And thanks to the XMPP Protocol (that is a push protocol) you battery life is safe. Conversations also does not require a Google Account or specifically Google Cloud Messaging (GCM). Using the XMPP federated protocol, you can freely choose a trustworthy server (your own if you want) for yourself while still chatting with contacts that are using other servers. The communication between Conversations and the XMPP server as well as the communication between the individual servers is TLS encrypted. This way, not only your messages are safe but more importantly it is impossible for an outside attacker to intercept your meta data (with whom you are chatting) without attacking your server first. On top of that, Conversations gives you the choice to enable one of two end-to-end encryption mechanisms. The first one is OMEMO, a state of the art multi-end-to-multi-end encryption method which is very easy to setup and gives you forward secrecy and plausible deniability. For backwards compatibility reasons Conversations also supports OpenPGP.
- CryptPad
- CryptPad is a libre and encrypted collaboration suite that can be used for forms, presentations and other collaborative documents.
- Crypton
- Crypton is a software framework for remote storage, where the remote server has no knowledge of what is being stored. The content is encrypted client-side before it reaches the server. The framework is designed to be easy for application developers to use, without needing experience in encryption.
- Ddgr
- ddgr is a cmdline utility to search DuckDuckGo from the terminal. While googler is extremely popular among cmdline users, in many forums the need of a similar utility for privacy-aware DuckDuckGo came up. DuckDuckGo Bangs are super-cool too! So here's ddgr for you! Unlike the web interface, you can specify the number of search results you would like to see per page. It's more convenient than skimming through 30-odd search results per page. The default interface is carefully designed to use minimum space without sacrificing readability. A big advantage of ddgr over googler is DuckDuckGo works over anonymous networks. ddgr isn't affiliated to DuckDuckGo in any way.
- Decentraleyes
- Protects you against tracking through "free", centralized, content delivery. It prevents a lot of requests from reaching networks like Google Hosted Libraries, and serves local files to keep sites from breaking. Complements regular content blockers.
Technical Information
- Supported Networks: Google Hosted Libraries, Microsoft Ajax CDN, CDNJS (Cloudflare), jQuery CDN (MaxCDN), jsDelivr (MaxCDN), Yandex CDN, Baidu CDN, Sina Public Resources, and UpYun Libraries.
- Bundled Resources: AngularJS, Backbone.js, Dojo, Ember.js, Ext Core, jQuery, jQuery UI, Modernizr, MooTools, Prototype, Scriptaculous, SWFObject, Underscore.js, and Web Font Loader.
FAQ
If you're using uMatrix, Edit in and Commit these lines to My rules in the Dashboard:
(Please note that each line must also START with a '*' character but this Wiki is broken and does not allow to render this properly!)
- ajax.aspnetcdn.com script allow
- ajax.googleapis.com script allow
- ajax.microsoft.com script allow
- cdn.jsdelivr.net script allow
- cdnjs.cloudflare.com script allow
- code.jquery.com script allow
- lib.sinaapp.com script allow
- libs.baidu.com script allow
- upcdn.b0.upaiyun.com script allow
- yandex.st script allow
- yastatic.net script allow
- ajax.aspnetcdn.com * noop
- ajax.googleapis.com * noop
- ajax.microsoft.com * noop
- cdn.jsdelivr.net * noop
- cdnjs.cloudflare.com * noop
- code.jquery.com * noop
- lib.sinaapp.com * noop
- libs.baidu.com * noop
- upcdn.b0.upaiyun.com * noop
- yandex.st * noop
- yastatic.net * noop
- Directnet
- DirectNet is a peer-to-peer instant messaging protocol and client software for multiple platforms, including Windows, GNU/Linux and Mac OS X, developed by Gregor Richards.
- DuckDuckGo (HTML SSL)
- DuckDuckGo is the search engine that doesn't track you.
- DuckDuckGo (Lite SSL)
- DuckDuckGo is the search engine that doesn't track you. We also have smarter answers and less clutter. This extension adds DuckDuckGo (non-JS Lite version) to the search bar. For more features, see the DuckDuckGo Plus add-on. Enjoy!
- Feather
- Feather is a free Monero wallet for GNU/Linux, Tails, macOS and Windows. It has many useful features and it is focused on privacy and security, it works through Tor network and websocket connection
- Free Software Directory search
- The Free Software Directory is a catalog of useful free software that runs under free operating systems. FSF staff and volunteers work together to collect detailed information about free software programs and organize it in a clear and accessible format. This is a search plugin for the Free Software Directory. A program is free software if the program's users have the four essential freedoms: 1) The freedom to run the program as you wish, for any purpose (freedom 0). 2) The freedom to study how the program works, and change it so it does your computing as you wish (freedom 1). Access to the source code is a precondition for this. 3) The freedom to redistribute copies so you can help your neighbor (freedom 2). 4) The freedom to distribute copies of your modified versions to others (freedom 3). By doing this you can give the whole community a chance to benefit from your changes. Access to the source code is a precondition for this.
- FreeTube
- FreeTube is a free software desktop YouTube player built with privacy in mind. Use YouTube without advertisments and prevent Google tracking from you with their cookies and JavaScript. Available for Windows, Mac & GNU/Linux thanks to Electron.
- Gitenc
- Gitenc is a simple shell script that works as a placeholder for git add and will parse filenames for sensitive names from git diff and apply GPG encryption as needed (filenames matching config, connection or sqlbackup) while handing everything off to git.
- Gnunet
- GNUnet is a framework for secure peer-to-peer networking that does not use any centralized or otherwise trusted services. Its high-level goal is to provide a strong free software foundation for a global network that provides security and privacy. GNUnet started with an idea for anonymous censorship-resistant file-sharing, but has grown to incorporate other applications as well as many generic building blocks for secure networking applications. In particular, GNUnet now includes the GNU Name System, a privacy-preserving, decentralized public key infrastructure.
- Gnupg
- GnuPG is a complete implementation of the OpenPGP standard. It is used to encrypt and sign data and communication. It features powerful key management and the ability to access public key servers.
This package, also known as GPG, is a command line tool with features for easy integration with other applications. A wealth of frontend applications and libraries are available.
Notes
Even if you have nothing to hide, using encryption helps protect the privacy of people you communicate with, and makes life difficult for bulk surveillance systems. If you do have something important to hide, you are in good company; GnuPG is one of the tools that Edward Snowden used to uncover the secrets of the NSA.
See also the Email Self-Defense site to learn how and why you should use GnuPG for your electronic communication.
- Gnuzilla
- GNU IceCat (originally GNU IceWeasel) is part of GNUzilla (the GNU version of the Mozilla Application Suite). GNU IceCat is based on the the current Firefox Extended Support Release (ESR), with removal of trademarked name, trademarked artwork, and proprietary components, and enhanced privacy settings.⚠ Outdated official binary release
Since 2019, IceCat is maintained only as source code. The last IceCat binary release was version 60.7.0, and is no longer supported. Guix and Parabola have up-to-date IceCat binaries. Please ask your distro to package IceCat.However, IceCat is not a straight fork of Firefox ESR; instead, it is a parallel effort that works closely with and re-bases in synchronization on the latest Firefox ESR as the upstream supplier, with patches merged upstream whenever possible; although it should be noted that additional security updates are customized to IceCat occasionally.
Differences between IceCat and Firefox ESR
Important differences between Mozilla's Firefox and GNU IceCat is that IceCat has a focus on freedom and privacy (see settings.js for details).
- Encrypted Media Extensions (EME) is not implemented: Whereas Firefox are being created such that they support Digital Restrictions Management (DRM) systems through their implementation of the Encrypted Media Extension (EME), GNU IceCat doesn't include an EME implementation as it opposes efforts to popularize and ease the dissemination of DRM technology.
- Widevine Content Decryption Module provided by Google Inc. is not installed in about:addons > Plugins
- The Play DRM-controlled content option (used to download and enable Widevine Content Decryption Module provided by Google Inc.) has been removed from about:preferences > Content
- "Accept third-party cookies: Never"
- WebRTC is enabled like in Firefox but prevent leaking the LAN ip. (Test WebRTC)
- The proprietary web chat IRC client Mibbit has been removed.
- Telemetry is disabled.
- DuckDuckGo is the default search engine, which means that you can run "!Bangs" keywords in the location bar to use any search engine.
Philosophy
"We will always make IceCat block non-free JavaScript by default. If you want to permit nonfree software to run, you can easily disable LibreJS." - Richard Stallman
Customized add-ons
- SpyBlock (Adblock Plus fork) to block privacy trackers.
History
GNU IceCat was formerly known as GNU IceWeasel but changed its name in 2008 to avoid confusion with Debian IceWeasel (who was rebranded back to Firefox in 2017 after Debian was being granted special permission from Mozilla ref).
The GNU IceCat developers dropped support for IceCatMobile on Replicant after version 38.6.0 because these builds are already provided by F-Droid. See Collection:Replicant for more information about IceCatMobile in the F-Droid repository.
GNU IceCat developers dropped support for macOS, and Windows, after version 38.8.0 in 2016: "Note that building binary packages for Windows and macOS currently requires non-free software, so we no longer distribute binary releases for those platforms."
See also
- Encrypted Media Extensions (EME) is not implemented: Whereas Firefox are being created such that they support Digital Restrictions Management (DRM) systems through their implementation of the Encrypted Media Extension (EME), GNU IceCat doesn't include an EME implementation as it opposes efforts to popularize and ease the dissemination of DRM technology.
- GoVPN
- GoVPN is simple virtual private network daemon, aimed to be reviewable, secure, DPI/censorship-resistant, written on Go. It uses fast strong passphrase authenticated key agreement protocol with augmented zero-knowledge mutual peers authentication (PAKE DH A-EKE). Encrypted, authenticated data transport that hides message's length and timestamps. Optional encryptionless mode, that still preserves data confidentiality. Perfect forward secrecy property. Resistance to: offline dictionary attacks, replay attacks, client's passphrases compromising and dictionary attacks on the server side. Built-in heartbeating, rehandshaking, real-time statistics. Ability to work through UDP, TCP and HTTP proxies. IPv4/IPv6-compatibility.
- Gofoss.net
- gofoss.net is a beginners guide to free software, privacy, data ownership and durable tech. Learn how to: safely browse the Internet; keep your conversations private; protect your data; unlock your computer's full potential; stay mobile and free; own your cloud; avoid filter bubbles, surveillance & censorship.
- HTTPS Everywhere
- HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instance, they may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site. The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS.
- Haven
- It is an Android application that leverages on-device sensors to provide monitoring and protection of physical areas. Haven turns any Android phone into a motion, sound, vibration and light detector, watching for unexpected guests and unwanted intruders.
- Historical/RequestPolicy
- RequestPolicy's new version is under development as RequestPolicy Continued. This addon prevents all connections to external domains or IPs from any website you visit, this means no connections to external advertisement hosters, analytics not on their servers and more things that you might not want to connect to or load. Saves bandwidth and privacy. It does require you to give explicit permission for these connections to happen, which is easily done with a drop-down menu of attempted connections and whether you wish to allow them each permanently or temporarily.
- I2P
- The Invisible Internet Project (I2P) is a project to build, deploy, and maintain a network supporting secure and anonymous communication. People using I2P are in control of the tradeoffs between anonymity, reliability, bandwidth usage, and latency. There is no central point in the network on which pressure can be exerted to compromise the integrity, security, or anonymity of the system. The network supports dynamic reconfiguration in response to various attacks, and has been designed to make use of additional resources as they become available. Of course, all aspects of the network are open and freely available. Unlike many other anonymizing networks, I2P doesn't try to provide anonymity by hiding the originator of some communication and not the recipient, or the other way around. I2P is designed to allow peers using I2P to communicate with each other anonymously — both sender and recipient are unidentifiable to each other as well as to third parties. For example, today there are both in-I2P web sites (allowing anonymous publishing / hosting) as well as HTTP proxies to the normal web (allowing anonymous web browsing).
- IceCat/Disconnect
- Disconnect lets you visualize and block the otherwise invisible websites that track your search and browsing history.
- Load the pages you go to 27% faster.
- Stop tracking by 2,000+ third-party sites.
- Encrypt the data you share with popular sites.
- IceCat/NoScript
- The NoScript (aka NoScript Security Suite) Firefox extension provides extra protection for Firefox, Seamonkey and other Mozilla-based browsers. Its aim is to allow active content to run only from sites you trust, and protect yourself against XSS and Click-jacking attacks. It is also useful to prevent Flash running on the browser. But its main advantage could be the alerts given on its interface. There is an increasing number of Web sites that cannot run without non-free JavaScript programs downloaded and executed on the visitor's computer. Richard Stallman first raised this another concern with his article The JavaScript Trap, pointing out that most JavaScript programs are not freely licensed, and that even free software Web browsers are usually configured to download and run these non-free programs without informing the user. So maybe NoScript could encourage people to keep informed about this related issue and take action. Anyway, NoScript is an extremely valuable Firefox extension for security. Its unique white-list based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality...
- IceCat/User-Agent Switcher
- Quickly and easily switch between popular user-agent strings.
- Inboxen
- Email service that allows a person to create an almost infinite amount of unique email addresses that the user can give to 3rd party websites. This lets the user have more control of their identity/privacy and keeps their personal email address free of junk.
- Invizi
- Invizi helps you track your cryptocurrency transactions. All your data is stored locally, encrypted and never leaves your computer. Invizi can calculate your profit and loss, your historical balance, your assets allocations and more. Your transactions can be automatically synchronized with exchanges, entered manually or imported via csv files.
- JavaScript-Toggle-On-and-Off
- It's a simple program used to enable and disable JavaScript easily. You can add websites to a whitelist and decide if the website will be reloaded when pressing the button.
- JiveSearch
- Self hostable search engine focused on privacy
- Karpion Anti-Phishing Toolbar
- This is the first release of Karpion, the Anti-Phishing toolbar for the web browser Konqueror. This tool bar is a part of the Open Phishing Database project.
- Kontalk
- Kontalk is a free software, secure and distributed instant messaging driven by the community. Kontalk protocol is based on XMPP with end-to-end encryption in both server-to-server and server-to-client. Kontalks is basically for phone, but it's also available for desktop now (GNU/Linux, Windows, and macOS).
- Libphish
- Freshports link available but no download links available. All maintainer emails broken. Poppy-one (talk) 15:21, 6 August 2018 (EDT) Libphish is part of the Open Phishing Database project, an effort to create and maintain and open database of phishing sites in order to protect users, in addition to providing extensions to browsers that utilize the database. Libphish is a library which interacts with the Open Phishing Database, providing a consistent API which browsers and other programs can use to verify the safety and risk level of URLs.
- MAT2
- mat2 is a metadata removal tool, supporting a wide range of commonly used file formats, written in python3: at its core, it's a library, used by an eponymous command-line interface, as well as several file manager extensions.
- MasterPassword
- Most password managers are password vaults: they let you store or generate a strong password for your services and then encrypt that key and store it for later retrieval. This approach presents many problems, in particular in the modern mobile age, that result in many frustrations: * Vault availability: If your vault is not available, you cannot use any of your services. * Added risk of identity loss: If you lose (eg. HDD failure/house fire) your vault, you instantly lose your entire online identity. * Force of law: Many countries have laws that require you to divulge the encryption key if a lawful search discovers your vault. Some password vaults implement features to try and address these issues, such as Internet sync, cloud-based vaults or backups and self-destructing vaults. These features all work around issues inherent to the solution and bring their own set of issues: * Network sync: Keeping data secure in transit is non-trivial and adds security risks. * Backups: Requires that you keep multiple locations secure from loss and theft, as well as the vault in transit. * Cloud-based services: Requires you to trust an external party and sacrifices transparency and freedom. * Defensive destruction: Reliability issues and again, risk total identity loss. Master Password is a completely different approach to passwords. The core issue that brings forth these problems is the vault used to store passwords. Master Password removes the vault from the solution by being a stateless solution, thus avoiding each of these issues. Master Password works by being an offline and stateless algorithm used to calculate your site passwords on-demand. Your passwords exist only as long as you need them and then disappear from disk and memory. Passwords are calculated based on a master password and the user's full name, combined with the name of the site. Calculation is based on strong, known and understood cryptographic hashes. Hash-based password generation is not new, but Master Password is a careful implementation that avoids many issues that other hash-based password managers suffer from. Cryptography is not easy and upon inspection, the security of most hash-based password generators completely falls apart. Master Password uses scrypt combined with hmac-sha256 and salting to prevent all known attack vectors.
- Metager
- MetaGer is a meta search-engine written in PHP. It is licenced under the terms of the AGPL-3. This and other open-source projects are developed by the german non-profit NGO SUMA-EV. They run an instance on https://metager.de/en . The developer version is available at https://metager3.de/en .
- Mobilizon
- Mobilizon is a federated system for organizing events developed by French non-profit Framasoft. It features the ability to create multiple profiles per account for increased privacy, as well as tools for co-ordinating events both with the general public (which allow participation without an account) and among organizers using "groups". However, it aims to be just "a tool", and rejects "features like subscriptions counters, thumbs ups or info walls with infinite scrolling". The ActivityPub protocol is used for federation.
- Movim
- Movim (My Open Virtual Identity Manager) is a distributed social network built on top of XMPP. It can be accessed using existing XMPP clients and Jabber accounts. Movim is a distributed social networking platform. It builds an abstraction layer for communication and data management while leveraging the strength of the underlying XMPP protocol. XMPP is a widely used open standards communication platform. Using XMPP allows the service to interface with existing XMPP clients like Conversations, Pidgin, Xabber and Jappix. Users can directly login to Movim using their existing Jabber account. Movim addresses the privacy concerns related to centralized social networks by allowing users set up their own server (or "pod") to host content; pods can then interact to share status updates, photographs, and other social data. Users can export their data to other pods or offline allowing for greater flexibility. It allows its users to host their data with a traditional web host, a cloud-based host, an ISP, or a friend. The framework, which is being built on PHP, is a free software and can be experimented with by external developers. Movim supports OMEMO, group chats (public and private, with or without password) with reactions, stickers and GIFs, it supports also screen-sharing, VOIP (1 to 1) and microblogging.
- NNCP
- NNCP (Node to Node copy) is a collection of utilities simplifying secure store-and-forward files, mail and commands exchanging. This utilities are intended to help build up small size (dozens of nodes) ad-hoc friend-to-friend (F2F) statically routed darknet delay-tolerant networks for fire-and-forget secure reliable files, file requests, Internet mail and commands transmission. All packets are integrity checked, end-to-end encrypted (E2EE), explicitly authenticated by known participants public keys. Onion encryption is applied to relayed packets. Each node acts both as a client and server, can use push and poll behaviour model. Out-of-box offline sneakernet/floppynet, dead drops, sequential and append-only CD-ROM/tape storages, air-gapped computers support. But online TCP daemon with full-duplex resumable data transmission exists.
- Nextcloud
- Nextcloud is a free, decentralized and open cloud platform. It allows you to sync your files, calendars and contacts while staying in control of your data. As a platform you can extend it with many existing apps or write your own. With federated sharing, Nextcloud allows you to collaborate with people across different Nextcloud installations. Nextcloud also provides real-time communication through Spreed.me and collaborative editing through LibreOffice Online integration.
- ObscuraCam
- https://f-droid.org/en/packages/org.witness.sscphase1/ Obscuracam is a photo and video app for Android that keeps certain information private. Ever capture someone in a photo or video, then realize they may not want to be in it? Not comfortable posting a friend, family member or child’s face on the internet? Worried about the geolocation data in the picture giving away private hideaway? Tired of Facebook, Google and other sites “auto detecting” faces in your photos? Then this is for you, giving you the power to better protect the identity of those captures in your photos, before you post them online. Take a picture or load a photo or video from the Gallery, and ObscuraCam will automatically detect faces that you can pixelate, redact (blackout) or protect with funny nose and glasses. You can also invert pixelate, so that only the person you select is visible, and no one in the background can be recognized. This app will also remove all identifying data stored in photos including GPS location data and phone make & model. You can save the protected photo back to the Gallery or any other “Share” enabled app.
- OnionShare
- What is OnionShare? OnionShare lets you securely and anonymously share files of any size. It works by starting a web server, making it accessible as a Tor onion service, and generating an unguessable URL to access and download the files. It doesn't require setting up a server on the internet somewhere or using a third party filesharing service. You host the file on your own computer and use a Tor onion service to make it temporarily accessible over the internet. The other user just needs to use Tor Browser to download the file from you. How to Use Open OnionShare, drag and drop files and folders you wish to share into it, and click Start Sharing. After a moment, it will show you a .onion URL. This is the secret URL that can be used to download the file you're sharing. Send this URL to the person you're sending the files to. If the files you're sending aren't secret, you can use normal means of sending the URL, like by emailing it, or sending it in a Facebook or Twitter private message. If you're sending secret files then it's important to send this URL securely. The person who is receiving the files doesn't need OnionShare. All they need is to open the URL you send them in Tor Browser to be able to download the file.\
- OpenVPN
- OpenVPN lets you to treat a collection of remote machines as though they are on the same network. The connections on this new, virtual network are secured by TLS/SSL. One machine acts as the network server, the others as clients. OpenVPN can also be a component in a TLS tunnel, where the client connects only to the OpenVPN server, which makes additional connections on the client's behalf.
- Openbazaar-desktop
- This is the reference client for the OpenBazaar network. It is an interface for your OpenBazaar node, to use it you will need to run an OpenBazaar node either locally or on a remote server.
- PHPkrm
- PHPkrm is a Web-based GnuPG keyring manager. It lets anonymous visitors add their own public keys and download all keyrings, and allows synchronization with external servers to refresh the keys and/or upload the keys.
- Pagekite
- PageKite is a system for connecting your localhost servers to the public Internet, giving them names and making them globally accessible. It works on most common operating systems and it doesn't matter what kind of Internet connection you have. The PageKite back-end configures DNS for your server and establishes communication with our global pool of front-end relays. These relays have public IP addresses and are visible on the global Internet, which makes it possible for them to accept incoming requests on your server's behalf. These requests get forwarded (proxied) over the tunnel to your server, and any replies travel back the same way.
- Panopticlick
- From the homepage: When you visit a website, online trackers and the site itself may be able to identify you – even if you’ve installed software to protect yourself. It’s possible to configure your browser to thwart tracking, but many people don’t know how. Panopticlick will analyze how well your browser and add-ons protect you against online tracking techniques. We’ll also see if your system is uniquely configured—and thus identifiable—even if you are using privacy-protective software.
- Peergos
- Peergos is a secure and private online space where users can store, share, and view their photos, videos, music, and documents. It offers a comprehensive suite of features including a calendar, news feed, chat, and a growing list of apps. Fully open source and self-hostable.
- Pidgin-otr
- "Off-the-Record Messaging plugin" (or pidgin-otr) is a Pidgin plugin for secure messaging using a protocol known as OTR. Like similar protocols, OTR allows you to hold secure (encrypted and authenticated) conversations. In addition, messages themselves are not signed (that is, they are off-the-record) and remain secure even if your private key is compromised (previous communication streams cannot be decrypted). These features are useful, for example, for journalists. Note, though, that these are technical restrictions not legal ones (a court may consider other evidence). This plugin offers various methods of initial authentication (challenge/response, shared secret), autogenerates keys, and retains keys so that you can continue conversations with people you have previously authenticated. It does not interfere with unencrypted conversations, although you can prompt the other user to install pidgin-otr (or another OTR client) themselves.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the page “GNU Free Documentation License”.
The copyright and license notices on this page only apply to the text on this page. Any software or copyright-licenses or other similar notices described in this text has its own copyright notice and license, which can usually be found in the distribution or license text itself.
