XSF Discussion - 2021-02-26

  1. goffi

    Hi there, I have some very good news. Libervia (formerly "Salut à Toi") has received a grant from NLnet for a big project in 2 parts: 1) an ActivityPub <=> XMPP gateway and 2) updating e2ee implementation and working on e2ee for Pubsub. In both cases protoXEP should be proposed to cover the missing features. I'll make a public announcement on my blog next week with more details.

  2. MattJ

    Very nice! Congratulations :)

  3. goffi


  4. Daniel

    Looking forward to the activitypub bridge.

  5. dwd

    goffi, Congratulations, that sounds exciting on both counts. You're looking at purely encryption on Pubsub or signing as well?

  6. goffi

    dwd: signing as well

  7. dwd

    goffi, That's awesome. I think there's a lot of applicability in signed/authenticated public pubsub.

  8. goffi

    yeah me too

  9. SamWhited

    wow, congrats! That's going to be very useful!

  10. dwd

    goffi, For example, software release announcements, which are a *big* topic in cybersecurity right now due to software supply chain concerns.

  11. dwd

    goffi, I'd be very happy to help out there if I can, and might be able to find you some other interested parties.

  12. goffi

    yes, and even for simple blogging, today we have to trust the pubsub service to know who is the publisher (and I think many of them/clients are not checking publisher), it's really easy to fake a blog comment.

  13. goffi

    dwd: sure with pleasure. I'll start with ActivityPub, Pubsub will be the second part, probably not before a couple of months.

  14. dwd

    goffi, Oh, for sure it's really useful in lots of places, but I'm most interested in the cases where the lack of authentication in a comms pipeline makes other, existing security issues worse. Vulnerability announcements and updates are both really critical path items in this area.

  15. goffi

    yeah make sense

  16. goffi

    I'll publish early protoXEP to have feedback from community as soon as possible, we'll have a chance to discuss use cases and avoid design mistakes.

  17. dwd

    goffi, That'd be great, I'm really looking forward to that.

  18. mathieui

    goffi: that is awesome, congrats

  19. goffi


  20. alacer

    goffi: 👏

  21. vanitasvitae

    goffi, dwd: thats awesome! I'd be interested in signing pubsub stuff as well 😉

  22. ralphm

    goffi: congrats!

  23. ralphm

    goffi: let me know if I can help, too, I may have some more time to get back to working on PubSub, Twisted stuff, in the coming weeks.

  24. goffi

    ralphm: thx, and sure I will. Beside this grant, I'm willing to fix pubsub collection, each time I've wanted to use it I've been blocked because the collection access_model override leaf nodes ones. But I'll talk at some point about that on the list, and propose a fix.

  25. ralphm