DecryptoCat - TobTu

TLDR: If you used group chat in Cryptocat from October 17th, 2011 to June 15th, 2013 assume your messages were compromised. DSA is probably broken in one-to-one chat over OTR. ECDSA is probably broken in group chat. You must update Cryptocat to at least 2.1.12 to be safe from known problems... As soon as it comes out. Here is the old post where I was less nice (it is a longer read with a little mo

[skam666]

“Cryptocat is run by people that don't know crypto, make stupid mistakes,(中略)Cryptocat's public key scheme is now good after being bad since pretty much the beginning. I would suggest not using Cryptocat as there's no telling how long it will be until they break their public key encryption.”