Notices by jabberati (jabberati@social.anoxinon.de)

@joeo10 @ploum XMPP still works great you just have to actually use it.

@TMakarios @fuat2mb @prosodyim I also don't understand the "market relevance" part. When I deleted WhatsApp I showed my friends and family how to get XMPP addresses. The rest of the "market" is just people I don't know.

A friend just sent me this. #xmpp #meme

@feld @wolf480pl if you look for weaknesses in the XML parsing, you can also do so after TLS has been established. What's the difference? Anyhow those concerns don't really move the needle in terms of overall security.

@feld @wolf480pl What's wrong with STARTTLS? Direct TLS is also possible and widely supported btw.

Machine-in-the-middle Detection and Monitoring for #XMPP Servers

https://certwatch.xmpp.net/

This service allows you to check your XMPP server's #TLS setup, helps you publicly store the hash of the public key in a secure way, and then monitors your server to make sure that connections to it get the same public key that you have configured and sends notifications if anything changes (which may indicate a #mitm attack on your service).

@anarchopunk_girl @kkarhan @fla @Mer__edith @signalapp I have contacts in the age range (8-86) using Conversations without trouble. I just helped them with the installation of F-Droid and the creation of an XMPP address. It paid off, since now I don't promote any walled gardens like Signal anymore.

@Polychrome @thunderbird Thunderbird (the XMPP client) does not have E2EE and any other modern messaging feature, but the UI seems to be from the 00's.