XSF Communications Team - 2021-01-15

Is a PSA needed as Prosody admins usually use coturn? https://www.rtcsec.com/post/2021/01/details-about-cve-2020-26262-bypass-of-coturns-default-access-control-protection/

Is this the cve that was recently fixed in debian or a new one?

Yes

To which part?

There's the openssl fix but that's not important

This is more important

Sorry OT: can on explain to my why there are critics on xmpp that "it uses xml", are there disadvantages?

emus, https://xmpp.org/about/myths.html might be a good first resource on that.

Link Mauve: thanks, I see. but that is the only critic raised?

emus: matrix is better because is newer Xmpp is bad because it's old Same for json/xml

ok

They treat it like they gonna edit json by hand, so xml is hard. Yet no one actually does that...

Ok, thanks for the round-up

I think we should put that to the newsletter somewhere the same as xmpp.work

"One of the myths regarding XMPP that keep poping up whenever XMPP is compared to other protocols is the use of XML, but..."