Difference between revisions of "XMPP Newsletter"
(25 intermediate revisions by 3 users not shown) | |||
Line 2: | Line 2: | ||
== Contributors | == Contributors == | ||
=== What determines relevancy? === | |||
The submission must ideally be a blog or article about XMPP/Jabber and/or | The submission must ideally be a blog or article about XMPP/Jabber and/or | ||
Line 15: | Line 17: | ||
Make sure you read the [[Basic communication guide for XMPP techies]] | Make sure you read the [[Basic communication guide for XMPP techies]] | ||
== | == Editors == | ||
=== TODO/checklist === | === TODO/checklist === | ||
Line 50: | Line 52: | ||
=== Intro === | === Intro === | ||
Welcome to the XMPP newsletter | Welcome to the XMPP newsletter October edition, covering the month of September. | ||
New this month: we added the license (CC by-sa 4.0), and the credits as this is a community effort. | New this month: we added the license (CC by-sa 4.0), and the credits as this is a community effort. | ||
Line 62: | Line 64: | ||
In case of internet shut down, whether by disaster or voluntarily, peer networks are useful. [http://monal.im/blog/xmppsignalbluetoothp2p-wifi-serverless-chat/ Monal uses Airdrop] (wifi and bluetooth) along with XMPP and OMEMO end-to-end encryption. | In case of internet shut down, whether by disaster or voluntarily, peer networks are useful. [http://monal.im/blog/xmppsignalbluetoothp2p-wifi-serverless-chat/ Monal uses Airdrop] (wifi and bluetooth) along with XMPP and OMEMO end-to-end encryption. | ||
[https://framapic.org/Qg1mv43w1673/akPmtepp0nfH.png] | [https://framapic.org/Qg1mv43w1673/akPmtepp0nfH.png Monal and Airdrop screenshots] | ||
JabberFr, the French XMPP/Jabber community, has again [https://news.jabberfr.org/2019/09/lettre-dactualite-xmpp-du-3-septembre-2019/ translated the XMPP newsletter in French], merci beaucoup. | JabberFr, the French XMPP/Jabber community, has again [https://news.jabberfr.org/2019/09/lettre-dactualite-xmpp-du-3-septembre-2019/ translated the XMPP newsletter in French], merci beaucoup. | ||
We have started a very minimalistic [https://wiki.xmpp.org/web/Basic_communication_guide_for_XMPP_techies communication guide] to help promoting a project through social networks and other means such as blog posts. Could be worth for those involved in XMPP projects and would like to get ideas on how to reach out to different communities. | |||
=== Videos === | === Videos === | ||
Line 74: | Line 76: | ||
=== Events === | === Events === | ||
As usual every year, that time has come: we proudly announce the XMPP Summit 24 and | As usual every year, that time has come: we proudly announce the XMPP Summit 24 and [https://fosdem.org/2020/ FOSDEM]. The 24th XMPP Summit will happen on Thursday 30th and Friday 31st of January, and FOSDEM will be held on Saturday 1st and Sunday 2nd of February. Prepare for the community gathering; now is good time to start booking your flights! | ||
[https://framapic.org/fTZlikXsyi0F/ZqlvJhNjWDFj.png FOSDEM 2020] | |||
=== Software releases === | === Software releases === | ||
Line 80: | Line 84: | ||
==== Servers ==== | ==== Servers ==== | ||
Réda Housni Alaoui is reviving the formerly dormant [https://github.com/apache/mina-vysper Vysper XMPP server] | Réda Housni Alaoui is reviving the formerly dormant [https://github.com/apache/mina-vysper Vysper XMPP server] (pronounced as "whisper"). | ||
[https://blog.xabber.com/xabber-server-v-0-9-alpha-is-released/ Xabber Server v.0.9 alpha is released], with quick installation and management panel | [https://blog.xabber.com/xabber-server-v-0-9-alpha-is-released/ Xabber Server v.0.9 alpha is released], with quick installation and management panel and interesting innovations. | ||
[https://www.erlang-solutions.com/resources/download.html MongooseIM 3.4.1 is out now] with an important security upgrade, fixing a vulnerability allowed any logged in user to crash the node with malicious stanza on certain (but popular) configurations. [https://twitter.com/MongooseIM/status/1176111308430815232 Read the whole thread on Twitter] for more information. | |||
[https:// | The igniterealtime community has many news: | ||
* [https://discourse.igniterealtime.org/t/openfire-4-4-2-release/86209 Openfire 4.4.2]: "This release should better support server to server (s2s) connections, fix a few admin console XSS-style issues, and improve client session stability." | |||
* The Fastpath Service plugin has been released in versions [https://discourse.igniterealtime.org/t/fastpath-service-plugin-4-4-4-released/86155 4.4.4] and [https://discourse.igniterealtime.org/t/fastpath-service-plugin-4-4-5-released/86198 4.4.5], bringing support for managed queued chat requests, such as a support team might use. | |||
* [https://discourse.igniterealtime.org/t/search-plugin-1-7-3-released/86207 Search plugin 1.7.3]: "This update 3 adds protection against CSRF and XSS attacks." | |||
* [https://discourse.igniterealtime.org/t/monitoring-service-plugin-1-8-1-released/86208 Monitoring Service plugin 1.8.1]: "This hotfix update 4 adds protection against XSS attacks on Archiving Settings page." | |||
==== Clients and applications ==== | ==== Clients and applications ==== | ||
Profanity | Profanity, has been released in [https://github.com/profanity-im/profanity/releases/tag/0.7.0 version 0.7.0] after five months of work, brining OMEMO end-to-end encryption, followed by a [https://github.com/profanity-im/profanity/releases/tag/0.7.1 0.7.1] bug fix release. | ||
[https://gultsch.de/dino_multiple.html Multiple Vulnerabilities found in Dino], please update as soon as possible if you are a Dino user. | |||
[https:// | Converse has been released in versions [https://github.com/conversejs/converse.js/releases/tag/v5.0.2 5.0.2] and [https://github.com/conversejs/converse.js/releases/tag/v5.0.3 5.0.3] fixing security issues among others. | ||
Converse users may find useful the new [https://blog.agayon.be/converse_xep_0070.html plugin to verify HTTP Requests via XMPP] from Agayon. | |||
For developers, there is a [https://github.com/conversejs/converse.js-docker Converse Docker image] by odajay. | |||
[https://github.com/siacs/Conversations/releases/tag/ Conversations has been released in version 2.5.8]. | |||
[https://monal.im/blog/monal-4-out/ Monal 4 with iOS 13 support and dark mode is out]. Mac update is expected to be already released for October. | |||
==== Libraries ==== | ==== Libraries ==== | ||
Line 104: | Line 116: | ||
=== Services === | === Services === | ||
[https://search.jabbercat.org/ Christopher Muclumbus], a listing and search engine of public XMPP | [https://search.jabbercat.org/ Christopher Muclumbus], a listing and search engine of public XMPP chats, has been updated with a visual redesign, group chat avatars, link to anonymous web chat and logs if available, and software version pie chart. | ||
=== GSoC === | === GSoC === | ||
Line 110: | Line 122: | ||
=== Extensions and specifications === | === Extensions and specifications === | ||
This month, three proposed | This month, three proposed XEPs, and two updated. No XEPs in Last Call, New, or Obsoleted. | ||
==== Last Call ==== | ==== Last Call ==== | ||
Line 152: | Line 164: | ||
=== Thanks and CTA, Call To Action (remove this mention before publishing) === | === Thanks and CTA, Call To Action (remove this mention before publishing) === | ||
This XMPP Newsletter is a community collaborative effort. Thanks to Nÿco, Daniel, Jwi, and MDosch for aggregating the news. Thanks | This XMPP Newsletter is a community collaborative effort. Thanks to Nÿco, Daniel, Jwi, and MDosch for aggregating the news. Thanks Nÿc, Seve, and Jwi for the copywriting. | ||
Please follow and relay the XMPP news on our Twitter account [https://twitter.com/xmpp @xmpp]. | Please follow and relay the XMPP news on our Twitter account [https://twitter.com/xmpp @xmpp]. |
Revision as of 13:30, 26 September 2019
Here you can submit news items for inclusion in the next XMPP Newsletter (as managed by the CommTeam).
Contributors
What determines relevancy?
The submission must ideally be a blog or article about XMPP/Jabber and/or XMPP-based software (clients, servers, libs).
Some exceptions might be made, for example for a release page showing a new release of some XMPP-based software.
However, marketing brochures (e.g. single-page marketing sites) for new products which don't contain information on XMPP, won't be included.
Make sure you read the Basic communication guide for XMPP techies
Editors
TODO/checklist
For the newsletter editors:
- Collect links in this wiki page, read and validate content
- Copywriting so it is readable by humans
- Add images
- Add clear CTA
- Subject line and preview text
- PR on website git repo for blog post (Markdown, Pelican), and peer review
- Analytics from latest newsletter in spreadsheet
- Newsletter via Tinyletter
- Twitter scheduling: text, image, hashtags, link, timestamp
- Empty this page, keep structure
Planning
October
- 2019-09-27 Fri: end of submission
- 2019-09-27 Fri: PR on GitHub
- 2019-10-01 Tue: newsletter publication, blog post, tweets
Submissions for next newsletter
Newsletter subject/title
[ Friendly, human introduction for the month (remove this mention before publishing) ]
- Prepare for FOSDEM, modern XMPP features, and more news
- FOSDEM 2020 Feb, modernization of XMPP, peer networks
Intro
Welcome to the XMPP newsletter October edition, covering the month of September.
New this month: we added the license (CC by-sa 4.0), and the credits as this is a community effort.
Be kind, inform your friends and colleagues: forward this newsletter!
Articles
Ralph Meijer, chairman of the Board of Directors of the XSF, has written an introductory piece about "XMPP Message Attaching, Fastening, References", specifications currently in progress.
In case of internet shut down, whether by disaster or voluntarily, peer networks are useful. Monal uses Airdrop (wifi and bluetooth) along with XMPP and OMEMO end-to-end encryption.
JabberFr, the French XMPP/Jabber community, has again translated the XMPP newsletter in French, merci beaucoup.
We have started a very minimalistic communication guide to help promoting a project through social networks and other means such as blog posts. Could be worth for those involved in XMPP projects and would like to get ideas on how to reach out to different communities.
Videos
Tutorials
Events
As usual every year, that time has come: we proudly announce the XMPP Summit 24 and FOSDEM. The 24th XMPP Summit will happen on Thursday 30th and Friday 31st of January, and FOSDEM will be held on Saturday 1st and Sunday 2nd of February. Prepare for the community gathering; now is good time to start booking your flights!
Software releases
Servers
Réda Housni Alaoui is reviving the formerly dormant Vysper XMPP server (pronounced as "whisper").
Xabber Server v.0.9 alpha is released, with quick installation and management panel and interesting innovations.
MongooseIM 3.4.1 is out now with an important security upgrade, fixing a vulnerability allowed any logged in user to crash the node with malicious stanza on certain (but popular) configurations. Read the whole thread on Twitter for more information.
The igniterealtime community has many news:
- Openfire 4.4.2: "This release should better support server to server (s2s) connections, fix a few admin console XSS-style issues, and improve client session stability."
- The Fastpath Service plugin has been released in versions 4.4.4 and 4.4.5, bringing support for managed queued chat requests, such as a support team might use.
- Search plugin 1.7.3: "This update 3 adds protection against CSRF and XSS attacks."
- Monitoring Service plugin 1.8.1: "This hotfix update 4 adds protection against XSS attacks on Archiving Settings page."
Clients and applications
Profanity, has been released in version 0.7.0 after five months of work, brining OMEMO end-to-end encryption, followed by a 0.7.1 bug fix release.
Multiple Vulnerabilities found in Dino, please update as soon as possible if you are a Dino user.
Converse has been released in versions 5.0.2 and 5.0.3 fixing security issues among others. Converse users may find useful the new plugin to verify HTTP Requests via XMPP from Agayon. For developers, there is a Converse Docker image by odajay.
Conversations has been released in version 2.5.8.
Monal 4 with iOS 13 support and dark mode is out. Mac update is expected to be already released for October.
Libraries
Other
Services
Christopher Muclumbus, a listing and search engine of public XMPP chats, has been updated with a visual redesign, group chat avatars, link to anonymous web chat and logs if available, and software version pie chart.
GSoC
Extensions and specifications
This month, three proposed XEPs, and two updated. No XEPs in Last Call, New, or Obsoleted.
Last Call
New
Proposed
Message Fastening
Abstract: This specification defines a way for payloads on a message to be marked as being logically fastened to a previous message.
URL: https://xmpp.org/extensions/inbox/fasten.html
XMPP Compliance Suites 2020
Abstract: This document defines XMPP protocol compliance levels.
URL: https://xmpp.org/extensions/inbox/cs-2020.html
Authorization Tokens
Abstract: This document defines an XMPP protocol extension for issuing authentication tokens to client applications and provides methods for managing сlient connections.
URL: https://xmpp.org/extensions/inbox/auth-tokens.html
Obsoleted
Updated
- Version 0.13.1 of XEP-0280 (Message Carbons) has been released. Changelog: Add clear example on problematic (spoofed) carbon messages and that they need to be handled. (gl). URL: https://xmpp.org/extensions/xep-0280.html
- Version 1.16.0 of XEP-0060 (Publish-Subscribe) has been released. Changelog:Add a pubsub#rsm disco#info feature to clear confusion (edhelas). URL: https://xmpp.org/extensions/xep-0060.html
Friendly specs
Thanks and CTA, Call To Action (remove this mention before publishing)
This XMPP Newsletter is a community collaborative effort. Thanks to Nÿco, Daniel, Jwi, and MDosch for aggregating the news. Thanks Nÿc, Seve, and Jwi for the copywriting.
Please follow and relay the XMPP news on our Twitter account @xmpp.
License
This newsletter is published under CC by-sa license: https://creativecommons.org/licenses/by-sa/4.0/