Two different fingerprints tied to one OTR

@ethannorth Ethan North
Thu, 18 Aug 2016 23:00:50 +0000

This is a thing.

This shouldn't be concerning, as long as you can verify that both fingerprints correspond to keys created by your colleague (for example by calling him and having him read the fingerprints to you).

When your colleague set up Adium, he generated a long term identity key pair and a corresponding fingerprint. When he set up ChatSecure, he did the same thing again. So, he likely has two keys, even though it seems that he is using one Jabber account, from your description. This is normal.

However, I'm confused that you were able to have the same fingerprint on different devices, when using different clients. Usually this is not the case unless you go out of your way to load the same key onto each device.