XSF Discussion - 2014-01-19

I wonder if the Debian thing might convince MattJ to come to FOSDEM after all?

He isn't?

He's not. Worse, neither is his dad.

Zash, You can represent Prosody to an extent as well, can't you?

I am no MattJ, nor does it seem like I'll be at FOSDEM.

Zash, Do you have TLSA records on your domain?

I do

For XMPP and HTTP

and SMTP

Ooooh. So you do.

dwd: This might be of use :) https://xmpp.net/reports.php#dnssecdane

So you've a service certificate constraint, full cert, SHA-256 match.

_tcp._5269 = TLSA(1, 0, 1, "zash.se.crt");

Hm, I should add support for those acronyms to that

_5269 = TLSA("PKIX-EE", "Cert", "SHA2-256", "zash.se.crt");

So as a DNSSEC thing the XSF could do, is work with Domicilium to get .im signed.

I suspect that'd remove DNSSEC/DANE barriers from quite a few servers, but I think we'd need to poke about inside the xmpp.net database to truly find out how many security concious servers might eb affected.

dwd: sounds like a good idea. Hopefully it can just be a letter drafted up with Peter's signature "Psst there's a lot of people not using .im fully because of … "

hey emcho

Expedia suggests I might like to fly to Brussels using CWL->AMS->BOD->NTE->BRU. 22 hours, including a 8:45 layover in Bordeaux.

Simon, I think we need more than just contact - both Peter and I have tried.

Cake?

Simon, I'll give them a call tomorrow.

MattJ, The cake is a lie, though.

dwd: expedia doesn't use ITA? :-)

Send flowers and cupcakes?

fippo, :-)

Simon, Take them out to dinner, maybe.

Where are Domicilium?

Isle of Man

even thour IIRC your route back from PDX was just as horrible

Hence the .im domain. :-)

fippo, That was horrible because the PDX->AMS flight landed just before the AMS->CWL flight took off.

well the registrar isn't always linked to the country the run it for…

fippo, The worst part was that I ended up running a high fever, and nearly missed the onward flight.

I can ask the famous James Body… I'm sure he has a contact inside since Truphone do a lot of work with the SMS and GSM gateways that are based in Manx.

Simon, No, true, but in this case they're IoM I think.

Pinging him now.

Simon, I can just give them a call tomorrow.

dwd: ouch!

fippo, I sat waiting at the wrong gate. QUite amusing in retrospect.

dwd: that's just schiphol. pretty close to schizo :-p

Ping him: https://www.linkedin.com/pub/phil-adcock/7/86/436

Righty, I'll do that tomorrow.

simon: I met James in the VUC again btw ;-)

the world turns out to be pretty small

fippo: he's a conference slut (meant in the nicest possible way) and a great guy.

Master of networking. And know his bits.

Has anyone got Thijs in their roster? I could do with knowing the number and proportion of .im domains in the Observatory's database. That'd indicate the numbers of security-concious XMPP servers we're looking at.

dwd- have you checked the stats page?

There's a few details there that could help you build a case.

Yes; the .im figures are the missing ones.

dwd: go to the prosody chat room

after all, you're one of the few celebrities not hanging out there ;-)

Nice answer from him :)

fippo, I'm even a Prosody user.

Debian wants to run dual stack IPv4/IPv6, there's the reason why they need to run Prosody 0.9 or up.

Hmm, is IPv6-capable LuaSocket in Debian yet?