jdev - 2023-11-08

Hello there

I have a really basic question to ask here

Is there a standard for key backups and being able to read messages encrypted on older devices? So far I've just been losing encrypted message history on any new devices. Matrix has the "encryption phrase" setup, does XMPP have anything similar? I've considered just extracting the OMEMO keys and inserting them into new instances of clients, even though this is not officially supported.

I know Conversations has backup support, but outside of that idk how to get around doing this

The only way is to do the backup conversations does. Matrix goes around it by uploading keys to the server and breaking certain encryption quarantees. Xmpp decided against doing that

Denshi: PGP is the best standard for doing that, copying OMEMO keys around won't do what you want

MSavoritias (fae,ve), there was very much a consensus around uploading some kind of key to the server to allow this, just that it's never been done :x

Wtf

Well maybe you don't know all of the story and the security implications (and what it doesn't break) :)

> The only way is to do the backup conversations does. Matrix goes around it by uploading keys to the server and breaking certain encryption quarantees. Xmpp decided against doing that Oh yeah certainly, the XMPP model is a lot more sec ure

*secure

Hi

I am new here and will like more information on software build with xmpp

I will appreciate it if I can be guided, thank you

XMPP Meet-up Berlin mattj talks about "Spam, Abuse and Moderation" in 15 minutes, join via: https://meet.in-berlin.de/XMPPMeetupBerlin https://fosstodon.org/@xmpp/111368609961723465