en.osm.town is one of the many independent Mastodon servers you can use to participate in the fediverse.
An independent, community of OpenStreetMap people on the Fediverse/Mastodon. Funding graciously provided by the OpenStreetMap Foundation.

Server stats:

272
active users

#jabber

19 posts16 participants0 posts today
Replied in thread

@jgoerzen

I agree and I would not even say, that my preferred solutions (mainly #Jabber or other federated systems) would be more secure for the threat models Signal tries to counter.

But, of course I can't recommend Signal to my family or to my friends, because they would not be able to reach me then and would wonder why I don't eat my own cat food 🙂

However, esp. with #Quicksy (which has an Indian variant now, called #Prav), I'ld say it's equally easy to get even non-tech people on board.

Replied to Debacle

⬆️ @debacle

>> 1. I don't want to use Google Android or Apple iOS. There is no first class client for Linux/#Debian/#Mobian.

Build one.

>> 2. I don't want to fuel the Amazon cloud of Jeff B., but prefer services in my home "country", the #EU.

Use #OpenStack or ask an EU provider to use it.

>> 3. I don't want to use a phone number for creating an account. E.g. it makes multi-account setups hard.

🔥 👍

>> …grey beard, but I'll stay with #Jabber 🙂

How about #Mastodon? 😉

@jgoerzen

Just reading through the #xmpp / #jabber core specification bc I initially wanted to write an own jabber <-> matrix bridge (the ones that exist either dont work anymore, aren't maintained or didn't work with my usecase), and I seriously consider just scraping that idea.

It's even more awefull of an protocol than HTTP; no length-prefix of messages, malformed xml, and genneraly try-and-error mentality for most of the protocol.

www.rfc-editor.orgRFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Replied in thread

@jgoerzen

I'm sure, that Signal is secure (for its intended use cases) and can be trusted. But… 🙂

1. I don't want to use Google Android or Apple iOS. There is no first class client for Linux/#Debian/#Mobian.

2. I don't want to fuel the Amazon cloud of Jeff B., but prefer services in my home "country", the #EU.

3. I don't want to use a phone number for creating an account. E.g. it makes multi-account setups hard.

Call me an old-fashioned grey beard, but I'll stay with #Jabber 🙂

Replied in thread

@Gerbsen @qbi @signalapp

"Nutzt Signal!"

Außer, wenn man kein Google Android/Apple iOS hat/haben will.

Außer, wenn man nicht Amazon AWS nutzen/finanzieren will oder befürchtet, DJT könnte jederzeit den Zugang sperren.

Außer, wenn man seine Telefonnummer nicht als Chat-Id verwenden will.

Email vs. Signal ist eine falsche Dichotomie. Es gibt freie, föderierte Alternativen mit Clients für die meisten Betriebssysteme und ohne Telefonnummernzwang.

Replied in thread

@j_r @erebion

Note, that #Jabber became better for large groups in recent years. It was horrible five or ten years ago, but IIRC, e.g. the developers of #Prosody @prosodyim and #Ejabberd @ejabberd optimized something about (not) sending presence or whatever.

Moderation is still not very advanced, but #XMPP made a bit of progress: There are "XEP-0425: Moderated Message Retraction" and xmppbl.org/

Better than nothing.

xmppbl.orgxmppbl.org
Replied in thread

@erebion

(2/2)

➕ Universal protocol for many use cases, chat, social, conferencing, IoT.

➕ Proven scalability (mainly in proprietary contexts: Whatsapp, Zoom, Grindr, FCM, Fortnite etc.).

➕ Secure. Somewhat. Well, at least neither inflammable nor slippery.

Best is: DJT cannot call Jeff B. and tell them to shut #Jabber down, because there are nerve-racking journalists in the chat group. That might happen with Signal, though.

@xmpp

Replied in thread

@erebion

I cannot even parse "foo is secure" or "bar is insecure". What does security mean in a given context? Is Signal inflammable or slippery?

The big plus points in favour of #Jabber/#XMPP are:

➕ Not a silo in the Amazon cloud. Many servers available everywhere.

➕ First class clients for many OSes, not only Google Android and Apple iOS.

➕ Long history since 1999-01-06, very good #LindyEffect property.

➕ #IETF standard governed by the #XSF, various independent implementations.

(1/2)