OK so now that we know how to create an ex MPP account configure pigeon to sign into this account are
the user and communicate with friends.
In this lecture I want to show you how to improve the privacy and anonymity of this method of communication
of X MPP using a plugin called T R.
So as you can see right now when we're sending messages you can see in here at the bottom right.
It's saying that our communication is not private.
To understand why our communication is not private.
Let's have a closer look on what happens when you send a message.
So we have David and John here that want to communicate their they're using an ex MPP server to communicate.
It doesn't matter what server they use.
Like I said they could be using two different servers.
So David has a message that is a secret message.
He sends it to the ex MPP server that he uses.
And then this server might relay two other servers or directly send it to John.
Then John can open the message and read it now.
Pretty much all of the servers and the list I gave you in the previous lecture support the allies.
And if you choose a grade a server then that means they're using the latest and greatest specifications
40 or less.
So that means the communication between you between the clients and the server are encrypted and hence
the red lines in here.
That means all of this communication is encrypted.
And if anybody manages to intercept this connection here or here they will not be able to read the message
because the message will be encrypted.
It will be gibberish.
The only problem is listen to what I said I said the communication between you and the server is encrypted.
So what that means is it means you will be able to read the message the server will be able to read
the message and the receiver will read the message.
Now it's find that you and the receiver can read the message.
The only problem is the fact that the server can read the message because the communication between
you and the server is encrypted.
But once the message is delivered to the server the server will be able to read it.
Now like I said you want to make sure you use a server that you trust and read about the reviews and
read about their privacy policy.
And even if the server is great and will not share anything that you do and will not log anything that
you do it's still not great that servers can read what we type.
It's not very private.
Therefore the solution to this is to use a plugin called OCR which is short for off the record.
And the idea behind this plugin is to make this communication as close as possible to an off the record
private communication that you can have with a friend.
So whenever you're talking to someone about something privately and you don't write anything about it.
So it provides end to end encryption that provides authentication so we'll be able to verify the person
we're talking to.
It provides perfect forward secrecy and deniability.
Now the way this works is so let's go back to our diagram.
We have David who wants to send a message over an ex MPP server that is using TALF.
So as you can see we have red lines here indicating that the communication is private.
But what happens is before sending this secret message David is going to encrypt the secret message.
So the message will become gibberish.
And then and only then he will forward it to the ex MPP server this means that the message that the
server will receive will be gibberish.
It will not be readable.
Then the server will relay this message to John when John opens this message.
It's still gibberish and he will have to use a key to decrypted and read the content of the message.
This way the only two entities that are able to read the content of the message are David and John the
sender and the receiver.
And even though the MPP server will read the message the content of the message will be gibberish because
it got encrypted by David before sending it.
Not only that anyone that intercepts the communication in here they will have to bypass two layers of
protection now.
They'll have to bypass TR less and the encryption implemented by the OCR plugin.
So let's go ahead and see how we can configure this with pigeon so that we can encrypt our messages
and send them privately so right here I'm already logged in to the account that we created previously.
And before I sent any further on private messages I'm gonna go to Tools plugins and I'm gonna look for
OCR or off the record.
We have it right here.
And as you can see it's enabled by default.
And I'm going to click on configure to configure this plugin and what I want to do right now is make
sure that it is enabled.
I want to make sure that automatically initiate private messaging and require private messaging are
ticked so that even if I try to send any messages unencrypted in the future pigeon will refuse that.
So I'll have to always use encryption that's done now.
I'm going to close this and now when we come here when we come to a conversation so let's close this
and just show you the steps from the start.
So you'll double click because you want to talk to your friend and again before you do anything.
As you can see it's seen the communication is not private.
So you can either click on this.
You can click on the OCR in here or on this icon.
So I'm going to click on this and we're going to select start private conversation to enable O.T. are
off the record and start communicating with my friend privately.
So as you can see it's telling us that it's generating a private key for me.
And it's done.
So I'm going to click on.
Okay.
And right now if I send a message.
So let's say this is a test and send it if we go here as you can see this is the friend that I sent
the message to.
He automatically got a private key as well because I requested to initiate a private conversation.
And as you can see automatically for him it's saying it's unverified.
So changed from private to unverified.
We'll talk about what the unverified means later.
But basically this means that the communication between us now is encrypted and as you can see we get
the message.
So now if I say hello back and go to the other person as you can see we received it right here.
And basically this means that any message I sent from here or from the other account is always encrypted
at my end and on the decrypted at the end at the destination.
So even the server will not be able to read the contents.
So that's it for this lecture.
Now our communication is private as you can see we still have one more notification in here saying that
our communication is unverified.
So we bypass the private problem now.
Our communication is unverified.
I will talk about what that means and how to fix this in the next lecture.