#806238 irssi-plugin-otr: sending /me actions via xmpp while using OTR fails to encrypt them

Package:
irssi-plugin-otr
Source:
irssi
Description:
Off-The-Record messaging plugin for Irssi
Submitter:
Daniel Kahn Gillmor
Date:
2015-11-25 17:48:03 UTC
Severity:
important
#806238#5
Date:
2015-11-25 17:15:55 UTC
From:
To:
I've got irssi-plugin-xmpp version 0.52+git20140102-3

In text-based chat, I'm in the habit of saying things like this during
a conversation:

 /me looks in his notes.

In IRC, most clients render it as something like "* dkg looks in his notes"

An XMPP correspondent (with whom i use OTR exclusively) just let me
know that her client just told her it shows up like this:

  The following message was not encrypted:
      /me looks in his notes.

So something about the interaction between the irssi xmpp plugin and
the irssi otr plugin makes it so this common "/me" use pattern is
leaks information that one would expect to be encrypted.
#806238#12
Date:
2015-11-25 17:29:54 UTC
From:
To:
Hi,

in case it might help find solutions: Pidgin + OTR used to suffer from
this problem for IRC (and I think it got fixed in Wheezy via a stable
update or a DSA), but not for XMPP.

Cheers,
#806238#17
Date:
2015-11-25 17:45:36 UTC
From:
To:
control: severity -1 important
thanks
# thanks for the bug report, Daniel!