XSF Discussion - 2019-12-01

Maybe xmpp URI Support on Codeberg https://codeberg.org/Codeberg/Community/issues/102 :-)

DebXWoody, cool :)

You should also link to the RFC to make it easier to find maybe, https://tools.ietf.org/html/rfc5122

pep., thanks. Done

Are there any companies doing some lobbying to the CA/Browser Forum btw? I was just reminded of that. Guus, you were providing hosted solutions right iirc?

Daniel ^

To get proper XMPP certs ^

I'm afraid that we don't have the budget for that

Maybe lots of small budgets can make for a bigger one :)

If you put two small budgets a large distance apart they can function as one large budget! https://www.xkcd.com/1922/

what kind of budget are we talking about?

because this seems like some way to spend XSF funds

yeah that's the well-known one :)

That's what I get in my browser now when I start typing "boulder"

In my experience posh works relatively well

I'd just lobby xmpp clients to implemt that

But web :(

Or public key pinning with DANE

Just have to get everyone off the terrible .im TLD that doesn't support DNSSEC

Isn't that a different issue?

moparisthebest: or shame them into finally implementing that abandoned dead end of crypto specification

Zash: no you don't need the cert signed by a CA in that case at all

I don't think you really even need a cert. Not sure what the state of raw public keys in TLS is tho.

DANE is apparently doing pretty well in the email space tho.