jdev - 2023-04-21

Is anyone in here moderately familiar with OMEMO standard?..

tollge: if you're looking for knowledge about the standard, you might also search for it in the xsf@ room.

trollge, yes

lovetox: does omemo say anything about renaming filenames before sending it via the xmpp server to the user?

That should probably be documented here: https://xmpp.org/extensions/xep-0363.html#uploader

tollge omemo has nothing to do with file uploads

so no

there is a historical standard about sharing aesgcm links

https://xmpp.org/extensions/xep-0454.html

this is what clients use for "OMEMO" filetransfer

but as far as i see nothing mentioned about filenames

hi people

is there a mechanism in non-anonymous MUCs, to verify if a message sent by a user is indeed sent by that user, and not tamperd by the MUC server

techmetx11: there are a few XEP that can be used for signing, but none in common use

techmetx11, OMEMO is one such mechanism.

OX is another.

Link Mauve: i meant signing messages, not encrypting

I guess if you're using OMEMO for encryption then it provides authenticity too, yeah

OX can do signing only. There's also a XEP that uses x509 for similar

If you trust the user's server for key discovery either can work for this

the difficulty would be verifying messages in a semi-anonymous MUC

I've thought you almost could do something DKIM style for this if you trust the user's server anyway, but I'm not aware of any effort in that shape

techmetx11: well, if it's semi-anonymous what would you even be verifying? You don't know who they are anyway

true