jdev - 2021-02-03

  1. defanor

    I've successfully tried XEP-0257/SASL EXTERNAL with Prosody's mod_auth_ccert and rexmpp a few months ago, though it's unfortunate that it doesn't seem to be usable along with other authentication methods in Prosody: either all the users have to use it, or none can.

  2. defanor

    FWIW, I'm also trying to keep track of some of the implementations supporting it, and there were the following ones: Prosody, Conversations, Gajim/nbxmpp (apparently should be removed now), gloox, Swift/Swiften, SleekXMPP/slixmpp.

  3. mathieui

    defanor, are you sure we can’t use anything else in prosody? I don’t remember this

  4. defanor

    mathieui, mod_auth_ccert is an authentication provider (see <https://prosody.im/doc/authentication>), and AIUI only one provider can be used for a domain at a time in Prosody. Though I guess it should be possible to write a provider combining multiple other providers.

  5. man

    what is the safest xmpp server?

  6. Sam

    “You tell me what a sandwich is and then I’ll tell you if a hot dog is a sandwich.”

  7. Sam

    (in other words, define "safest")

  8. Zash

    Oh, is it time to recite the "security is undefined without a defined threat model" rant?

  9. Sam

    Zash: I'm tired of giving it, it's your turn :)

  10. Zash

    Nah, busy.

  11. Sam

    Fair enough

  12. moparisthebest

    the safest xmpp server would be one that you didn't run, see what I did there? absolutely unhackable

  13. moparisthebest

    but he left so I can't give him a real answer, oh well

  14. Sam

    Yah, I guess I should try to provide some options instead of being trite since people ask and then leave quickly frequently for some reasons

  15. Zash

    You didn't answer within seconds? Terrible performance, you're all fired from on-call support.

  16. moparisthebest

    I still get the same amount of pay though right?

  17. Sam

    moparisthebest: in fact, you get a 200% raise!

  18. Sam

    Congrats on your new XSF salary level!

  19. stpeter


  20. Zash

    stpeter! congrats on your fancy title.

  21. stpeter

    Thanks, Zash! You're doing such a great job, please take the rest of the day off with full pay!