I'm running spark on openfire server and communicating to another client using otr. Is it possible to detect this using wireshark?
asked 15 Aug '12, 23:21
Spark tries to use TLS by default and Openfire has TLS enabled by default, as optional parameter for the client connection (Admin Console -> Server -> Server Settings -> Security Settings -> Client Connection Security -> Custom -> TLS method).
So, you cannot read the clear text communication (XMPP) between a spark client and openfire and thus you cannot detect the use of OTR.
If you disable TLS at the server (NOT a good idea !!), you can read the whole XMPP protocol and then you can detect the use of OTR. OTR messages start with '?OTR:'.