XMPP Service Operators - 2020-12-01

Hi, I'm not 100% sure I'm in the right place. Is this the chat room I may join as a new XMPP user for support-style questions?

Probably not

This is the operators chatroom

This where where the people who run various servers discuss things and chat

I see. But isn't everyone supposed to self host their own XMPP server? :)

This is exactly what I want to ask you about.

OK. My question. At the worst case you may redirect me to the proper chat room to ask this. You are probably familiar with these two articles: https://infosec-handbook.eu/blog/federation-myths/ and https://infosec-handbook.eu/blog/xmpp-aitm/. I've only found one answer to them in the form of a German blog post. You are probably familiar with that one, too. Yes, I could use Google Translate but if the world (and I mean not only the German speaking world) should care about XMPP then there should be English language discussions about these issues. Or how do you see it? Infosec Handbook's authors are of German origin too, but they write in English, for a reason. I tried to search the chat archives for previous discussions about the articles but I couldn't find anything.

John_Bob: what's to discuss, those are known "issues" that even Signal/Telegram/Wire/etc share too, so?

Well. Is everyone here listening is on the same opinion as @Licaon_Kter or perhaps any of you have a second opinion? I also want to add that I'm probably a less tech savvy user than most of you. I just wanted a cool platform with features to chat with friends and maybe connect to other services. But the Infosec Handbook articles made me wonder if really XMPP is what I'm looking for or perhaps something else.

To give you more context, I feel like on @mlohr's side in this Mastodon discussion: https://social.avareborn.de/@nipos/103210779243155877

Do I ask these questions in the wrong place, or only at the wrong time? It would be cool to have a discussion about these issues. It doesn't need to happen in real time, of course. I can check back later knowing the chat history.

John_Bob: what is your question, exactly? Are you soliciting opinions about those articles, or do you have a specific concern perhaps?

maiki: asking for opinions, not soliciting. :)

Good night!

John_Bob: everyone doesn't have to self host their own xmpp server

You can if you want to

If you want to ask about self-hosting xmpp this is the place

» Running your own server isn’t a magic bullet, either. You not only have to rent a server, but you also have to install server software, harden your server, implement security measures, regularly update its software, and keep it secure. This implies that you understand web server security, check log files, and monitor your server permanently. Owning a vehicle isn't a magic bullet, either. You not only have to purchase a vehicle, but fill it with fuel, check the oil levels and tire pressure, and clean it every now and then. Sometimes you may even need to read the owners manual to figure out how often to maintenance things and diagnose issues.

Omemo is still experimental, meaning the implementation details are still very much up in the air. If you want to improve them please do contact the XSF

Hello. If I'm interested in clustering an xmpp install, is prosody or ejabberd a better option to research?

I don't think prosody can be clustered can it?

If it can i'd like to know as well

Wouldn't make much sense for the sql backend to exist if it couldn't would it?

Ah ok, I think you're right. I'm just starting to read up on my options.

» Running your own server isn’t a magic bullet, either. You not only have to rent a server... I hear you can _buy_ computers, too, or even buy components and build them.

http://premiumcvv.com

John_Bob: it's not a matter of opinion, just a fact about how these things work, look up the details and you can draw the same conclusion, and add your own "but..."

» I hear you can _buy_ computers, too, or even buy components and build them. =O WUT *gasp*. You mean like, actually own a computer, not just rent the cloud!?

Isn't that illegal?

🤣

It's _your_ computer, but you can't start any programs since an Apple server is down, you can't search local files since a Microsoft server is down, you can't see a map route since a Google server is down, ....

John_Bob: In these discussions (infosec handbook, Github issue only skimmed) I always miss the fact that you can just create as many xmpp accounts on as many servers as you want and its far more easy than acquiring a Czech phone number. That way no server admin can really force you to trust them as Signal can.

But what will I do without pichai knowing where I am 24/7

What i buy at the store