@j@ros I was too lazy to look up just how outdated every bit of information in this article is. I smell either a lazily updated article written a decade ago, or some manually edited AI slop.
@daniel@joinjabber@nigel I assume as long as SASL-PLAIN is the only way to achive auth integration with other system, there is really no way around that. Channel Binding is a nice feature, but personally I find it much lower priority than auth integration.
Maybe you could look into supporting Oauth2/OIDC login flows in Conversations? At least Prosody seems to have good support for this now, and I think this might be the only realistic way to have both Channel Binding and auth integration.
Otherwise, being like Discord isn't really a goal of Movim ( https://movim.eu ), but it has a lot of features that people consider important in Discord, such as audio / video group calls with screen-sharing, Stickers and custom emojis.
@grafcube XEP-503 doesn't need specific server support according to the author and Slidge Discord gateway developer. It is more of a question of clients displaying the spaces properly.
@sun Ah, I guess my comment wasn't clear enough then: Only Matrix is a commercial product primarily run by a single venture-capital funded company in that list.
@dequbed again false, XMPP has e2ee in group chats and it usually works better than on Matrix, but admittedly that is a low bar and hopefully MLS will improve that further in XMPP soon.
@dequbed Uff... like every single sentence you wrote is either wrong or very outdated. XMPP has all those features, and group chats have significantly less issues such as incompatible rooms versions or broken e2ee like with Matrix.
@jackemled@kariboka@Sh4d0w_H34rt@joinjabber@nullagent@adele Nothing is "plain text", as everything is always transport encrypted. Together with a self-hosted xmpp server that is pretty good already, and OMEMO on top works just fine in most cases.
@its_a_me@bhhaskin The entire article has basically only one real point: e2ee isn't mandatory in XMPP. That's also basically Soatok's primary shtick, if it isn't mandatory e2ee, it's automatically bad. And they do have a point with centralized services that run on compromised infrastructure like Signal, but outside of that the argument for mandatory e2ee is much weaker.