XMPP Service Operators - 2020-01-16

> MattJ has written: > That's different to "nobody is" :) > Windows servers Gaming servers, GeForce Now servers?

Hey, colleagues! I'm a bit new to Jabber administration. Nice to see such a dedicated community

alien: 👍

Are there any working Matrix gateways for XMPP? I know that there is Spectrum and libpurple matrix plugin but they say there is an issue with capital insensitive usernames

alien: why would you bother?

alien, there is the bifröst bridge, which even seems to be running/deployed somewhere, but I don’t know where

Ge0rG, do you know more about the current state of affairs? ^

Licaon_Kter: I want to put all my IMs in one app

alien: riiiight

alien, jonas’: there is a running semi official bridge on half-shot.uk

And the official one will be deployed "only two weeks from now" since April

Soon™

Ge0rG: I mean I want to self host it, but thanks

alien: https://github.com/matrix-org/matrix-bifrost/

Ge0rG: did you try running it?

MattJ: no, it requires a home server

:(

but I'm sure somebody will come up with a mod_matrix_c2s based on the 1.0 protocol

Ge0rG‎, that's not what I'm looking for. I mean I want matrix to be available inside my XMPP client, like ICQ in good old days

alien: yes, that's what bifröst will do for you

Ge0rG‎, as far as I understand from READER, it's not. It's a matix puppeting bridge for libpurple and XMPP to use XMPP inside of matrix

No, I have joined matrix channels from XMPP through it

And the reverse is possible, matrix devs use it to hang out in XMPP chats sometimes

> but I'm sure somebody will come up with a mod_matrix_c2s based on the 1.0 protocol 1.0 being the monolothic perpetual modifying protocol?

No! The single unified standard that every Matrix implementation will magically implement in its entirety :)

Soon™

Licaon_Kter, already more than six months ago. :p

Although from what I’ve heard, their main client still mostly use endpoints marked unstable, and every other client has to either do the same or deal with the lack of features that ensues.

It doesn’t seem very pleasant.

But....the French deployment....but decentralization with matrix.org...but...

> ECDSA is one of the worst crypto algorithms in modern use OMG CVE-2020-0601 Ge0rG was right all along???!???

https://nvd.nist.gov/vuln/detail/CVE-2020-0601 - Windoof

Link Mauve, something about Experimental XEPs ;)

Licaon_Kter: it's not a problem in ECDSA but in what kind of curve configurations windows will accept

Of course, it's idiotic to have a design where the attacker can submit the properties of the desired algorithm. But it's even more idiotic to have an algorithm that will leak your private key if you reuse a nonce

I know, implementations can foobar anything ;)

> something about Experimental XEPs Sure we do the same thing, but their marketing keeps claiming they do _better_ by avoiding the fragmentation resulting from the modularity of our specs.

Holger: at least they *do have* marketing

Indeed.

Holger, I think the main difference is that they have a flagship client on each plattform, so they can back that claim up.

(and call all other clients "unfinished" side projects)

jonas’: on some platforms, they have two

> MattJ has written: > No, I have joined matrix channels from XMPP through it Can you give me some links on how to setup it pls?

I've never run the bridge myself. As Ge0rG noted, it requires running a Matrix server as well as the bridge, as well as your XMPP server

I don't have the resources to run a Matrix server on my VPS

I use the one Ge0rG mentioned, running at half-shot.uk

How can one join a Matrix room from xmpp with half-shot.uk?

Martin, #room#matrix.org@half-shot.uk

thx

You can also disco#items on that domain, but it'll return invalid JIDs

16.01.20 18:10:06 - mdosch.de: Establishing a secure connection from mdosch.de to half-shot.uk failed. Certificate hash: 708dbe9a9b04bf458dba6c08496aae36cc70d2da68c2bc00f9e9cea028823a99. Error with certificate 0: certificate has expired.

Yeah, that looks already promising!

Or is this why it's called half shot? It got a cert but it's expired.

I guess my s2s has stayed up

https://xmpp.net/result.php?id=1466209 is very interesting as well

Reckless? 😁

Ge0rG, c2s isn’t any relevant though, I started a s2s test.

Certificate has expired it seems.

Using the half-shot.uk bridge also means that they can monitor every connection and every message, regardless whether or not it’s a MUC or private chat?

ij: yes

Ge0rG, https://xmpp.net/result.php?id=1466210

@Ge0rG - who’s running the bridge? GCHQ in an undercover operation? ;) Well, it’s nice to have that kind of bridges for occational use, but not more…

ij: NSA maybe

ij, you ask who is running half-shot bridge?

not seriously

Because everybody knows that Half-Shot is