XMPP Service Operators - 2022-01-04

Is there way to hide info like the user's operating system or their client details, so that other users don't see it? Either from the server side (preferably prosody) or the client side (psi, pidgin, swift and other clients)

See those clients settings?!

Well I'm mainly asking about completely disabling it server side

Google is of no help

Neither is prosody documentation, that's why I'm here

mightymiddler, you can block queries using Prosody's mod_firewall

A rule like this should work: KIND: iq PAYLOAD: jabber:iq:version BOUNCE=service-unavailable

Full docs at https://modules.prosody.im/mod_firewall

no TYPE: ?

Add TYPE: get

That will allow users on your server to query the version of other people

(You mean disallow, right?) I'll try it out now

I mean without 'TYPE' it will block incoming queries to your users, but also the responses to queries (e.g. if your users try to query someone's version on a different server)

If you add 'TYPE: get' then it will not match the responses (which have type 'result')

Oh I get it now

It works! Thanks a lot

:)

mightymiddler, why do you want to block that btw?

Seems like a bad thing for privacy

mightymiddler, you might want to block urn:xmpp:time too, I used to think it wasn't commonly implemented but apparently Conversations does, you might want to block urn:xmpp:time too, I used to think it wasn't commonly implemented but apparently Conversations does ✏

(apologies for the incorrect mention!)

no worries :)

disroot admin around? From Tigase channel > DNS for this server is not configured properly - it advertises support for `_xmpps-client._tcp` service on port 5223 but it rejects the connection to that port - server needs to be reconfigured or DNS entries need to be fixed

anyone from "wiuwiu.de"/"xmpp-hosting.com" here?

Licaon_Kter: looks like Muppeth is offline atm, I can pop a mention of that in the disroot general room though.

mike: thanks

Establishing a secure connection from jabber.gg to lebihan.pl failed. Certificate hash: 151045a9417eb1efacf0a7f6dfb7aa68a6b5f68c13a1e6d8c3b29752e447ec60. Error with certificate 0: certificate has expired.

> Has anyone seen Ralphm? Martin: bit late but are you still seeing this?

ralphm: Seems to work now.

Ok, weird. I don't think anything has changed really

Maybe some temporary network hiccup…

Establishing a secure connection from lebihan.pl to emevth.no-ip.biz failed. Certificate hash: f23518f572dd1897e6ae2a24b5aafeac630b06337e6ec6de30eac4a4a21d7ee4. Error with certificate 0: certificate has expired.