XSF Discussion - 2022-04-05

The XMPP Newsletter for March '22 is out! Many thanks to all who contributed! Read about last month's activities in the XMPP community and the development of the specifications (XEP)! Enjoy reading! 📰 ☕ https://xmpp.org/2022/04/the-xmpp-newsletter-march-2022/ Toot: https://fosstodon.org/web/@xmpp/108081220463585550 Tweet: https://twitter.com/xmpp/status/1511432207818280970

excellent work yet again emus

🎉️

🕺️

Wheee

Any know knows a way to size images alike:  I want to fix the size to eg. 600 px width

so that HTML piece here will recognize it: <p><img src="https://xmpp.org/images/newsletter/2022-03/cheogram-screenshot.png" alt="JMP Cheogram" title="JMP Cheogram"></p>

how to resize them? I usually use `convert` from imagemagick on the command line

poll: If you ask XMPP client devs in xsf@ and jdev@ to contact you about a vulnerability via email or XMPP, do you think most contacts will be via: 1. XMPP 2. email (it's not even close btw, it's a landslide)

I'm confused but nevermind

I would assume email, just because it's longer form and it's going to be easier to describe the issue?

From my experience many blog away foreigners and never reply on their JID

so +1 email

I *would* have said XMPP but it was email indeed

like 2 vs ... 7 or something? I lost track of the emails

Also email has better support for generic security@ addresses as opposed to communicating with alice@ individually. But in this specific case (XMPP client devs) probably not the point.

Anyway, so we have somthing like security@xmpp.org ?

I think it would be good to provide the option

Don't we already have that?

I thought so.. wait

if so, it should be here: https://xmpp.org/contact/

what would it do? triage bugs that affect the whole ecosystem ?

maybe I'm thinking of something else tho

or just bugs with XEPs or ?

I've found both in the last month or so :'(

Did anyone subscribed to the XMPP newsletter via mail received anything?

emus, yes, but went to spam (Gmail)

Welcome to self-hosting mailing lists :)

and yes, the protonmail address was in the "From"

And you know that's just a free form text field where you can put anything, right? (modulo some pile of RFCs you have to opt-in to for email to approach a fraction of XMPPs strictly sane security and symetry)

unfortunately the alternative isn't much better https://techcrunch.com/2022/04/04/mailchimp-internal-tool-breach/

_the_ alternative, you mean farming potatoes? vastly superior

unfortunately that has problems too https://en.wikipedia.org/wiki/Potato_blight

> MattJ escribió: > and yes, the protonmail address was in the "From" Ok, what do you recommend to do?

Sleep :)

😅 you want the sender to be XMPP Newsletter?

thank you for newsletter emus :)

rq77: Sure, but remind its also done with support of others

rq77: have you sibscribed via mail?

no

ok