XSF Discussion - 2021-05-02

For testing XMPP server/client capabilities and security there's xmpp.net and compliance.conversations.im/server are there other websites for checking XMPP capabilities, compatibilities and securities?

sidereal0: https://badxmpp.eu/

thank you!

‰ hsendxmpp -v -u l29ah -j tls1.badxmpp.eu 'l29ah@bitcheese.net' <<< test Opening stream... Performing SRV lookup... No SRV result returned. No SRV records, using fallback process. Connecting to 46.43.15.35:5222 Successfully connected to 46.43.15.35:5222 Acquired handle. Setting NoBuffering mode on handle. Starting stream... Out: <stream:stream version="1.0" to="tls1.badxmpp.eu" xmlns="jabber:client" xmlns:stream="http://etherx.jabber.org/streams"> in: <?xml version='1.0'?><stream:stream xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' id='73fee99a-e72e-4d11-a69b-28ae0390ac0f' version='1.0' from='tls1.badxmpp.eu' xml:lang='en'><stream:error><host-unknown xmlns='urn:ietf:params:xml:ns:xmpp-streams'/><text xmlns='urn:ietf:params:xml:ns:xmpp-streams'>This server does not serve tls1.badxmpp.eu</text></stream:error></stream:stream>

i wonder if that's expected behavior

also fail-tls.badxmpp.eu lacks a SRV record

that site looks difficult to use

It was made by a server developer for testing servers firstly.

L29Ah, as it says on the page, there's no c2s tests yet, so that doesn't work

ah thanks

I get a headache looking at it. It seems useful for those running their own server to check that their configuration or setup works well.

It's not really for testing your own server, it's for testing implementations

server software, like prosody?

yes. or any client, once that's set up

Like https://badssl.com/

It linked there

Oh I see now. I didn't catch on the first time I saw the link that that one was obviously for SSL, which the XMPP one is based off of

Yeah. Having something intentionally broken is useful to see how your own software reacts.

Like a calibration point

A control.

Better than waiting for your friends servers' cert to expire to see what the errors look like etc.

It makes sense. It's really for those running servers

My toot for XMPP Office hours: https://fosstodon.org/web/statuses/106167554706690845 If there are any volunteers with Twitter access and to put that into a tweet that would be great! ❤️