jdev - 2021-02-03

I've successfully tried XEP-0257/SASL EXTERNAL with Prosody's mod_auth_ccert and rexmpp a few months ago, though it's unfortunate that it doesn't seem to be usable along with other authentication methods in Prosody: either all the users have to use it, or none can.

FWIW, I'm also trying to keep track of some of the implementations supporting it, and there were the following ones: Prosody, Conversations, Gajim/nbxmpp (apparently should be removed now), gloox, Swift/Swiften, SleekXMPP/slixmpp.

defanor, are you sure we can’t use anything else in prosody? I don’t remember this

mathieui, mod_auth_ccert is an authentication provider (see <https://prosody.im/doc/authentication>), and AIUI only one provider can be used for a domain at a time in Prosody. Though I guess it should be possible to write a provider combining multiple other providers.

what is the safest xmpp server?

“You tell me what a sandwich is and then I’ll tell you if a hot dog is a sandwich.”

(in other words, define "safest")

Oh, is it time to recite the "security is undefined without a defined threat model" rant?

Zash: I'm tired of giving it, it's your turn :)

Nah, busy.

Fair enough

the safest xmpp server would be one that you didn't run, see what I did there? absolutely unhackable

but he left so I can't give him a real answer, oh well

Yah, I guess I should try to provide some options instead of being trite since people ask and then leave quickly frequently for some reasons

You didn't answer within seconds? Terrible performance, you're all fired from on-call support.

I still get the same amount of pay though right?

moparisthebest: in fact, you get a 200% raise!

Congrats on your new XSF salary level!

:-)

stpeter! congrats on your fancy title.

Thanks, Zash! You're doing such a great job, please take the rest of the day off with full pay!