Difference between revisions of "XMPP Newsletter April 2020"

From XMPP WIKI
Jump to navigation Jump to search
(First edits for the March draft)
(Copy finished, removed a few old entries from the previous newsletter which dont make sense now)
Line 57: Line 57:
 
Report from Sprints DU and BER
 
Report from Sprints DU and BER
 
https://hackmd.syndace.com/s/r1fNElZSL#
 
https://hackmd.syndace.com/s/r1fNElZSL#
 +
Please stay informed about the Berlin Sprint due to the COVID-19 situation.''(And yes the Düsseldorf Sprint already happened!)''
 +
 +
On 1-2 February, [https://fosdem.org/2020/ FOSDEM], was held in Brussels, Belgium. As usual the XMPP community coordinated the Real-Time Lounge, a corner where several open source projects around Real Time Communication can present themselves. At the XMPP booth there were lots of nice conversations with FOSDEM visitors. The easy onboarding of Snikket was one of the eye catchers at the booth. In the Real Time developers room thee was a talk about the [https://fosdem.org/2020/schedule/event/xmpp/ modularity of the XMPP protocol] by Winfried Tilanus.
 +
 +
As usual, before FOSDEM a part of the XMPP community gathered for [https://wiki.xmpp.org/web/Conferences/Summit_24 XMPP summit 24]. Over the course of two days many aspects of the XMPP protocol were discussed, including onboarding, 'rich presence', several aspects of encryption, MIX, Bind/SASL, Stickers and rich markup. The attendants regarded this summit as very productive and many of the discussions already resulted in proposed protocol extensions and patches to existing extensions.
 +
 +
  
 
=== Software releases ===
 
=== Software releases ===
 
            
 
            
 
==== Servers ====
 
==== Servers ====
 +
 +
Jackal (XMPP server written in Go) was [https://github.com/ortuman/jackal/releases/tag/v0.8.2 released in version 0.82].
 +
 +
The Ignite Realtime Community [https://discourse.igniterealtime.org/t/openfire-4-5-1-is-released/87183 releases version 4.5.1] of Openfire with fixes and improvements you can review in their [http://download.igniterealtime.org/openfire/docs/latest/changelog.html changelogs]. REST API Openfire plugin was also released in [https://discourse.igniterealtime.org/t/rest-api-openfire-plugin-1-4-0-released/87286 version 1.4.0].
 +
 +
Erlang Solutions were writing about [https://www.erlang-solutions.com/blog/improving-push-notifications-with-mongooseim.html improvements of push notifications within MongooseIM].
 +
Mongoose also release MongooseIM [https://github.com/esl/MongooseIM/releases/tag/3.6.1 version 3.6.1] and [https://github.com/esl/MongoosePush/releases/tag/2.0.1 MongoosePush version 2.0.1].
  
 
ProcessOne released their [xmpp-notifer v1.0.0 https://blog.process-one.net/xmpp-notifer-v1-0-0/] which allows to send notification to XMPP.
 
ProcessOne released their [xmpp-notifer v1.0.0 https://blog.process-one.net/xmpp-notifer-v1-0-0/] which allows to send notification to XMPP.
Line 68: Line 82:
 
==== Clients and applications ====
 
==== Clients and applications ====
  
https://monal.im/blog/new-mac-and-ios-betas-2/
+
Tigase has released new [https://tigase.net/beagleim-3.6-and-siskin-5.6-released/ versions of BeagleIM and Siskin].
 +
 
 +
Goffi has released his SàT [https://www.goffi.org/b/HsWxUHzXdvsH7Syrx8f6Ne/progress-note progress note 2020-W08].
 +
 
 +
A bunch of clients have switch OMEMO IV 16 byte to 12 byte. Those were [https://github.com/siacs/Conversations/releases/tag/2.7.0 Conversations], [https://dev.gajim.org/gajim/gajim-plugins/commit/25cba9eea702336e82f75faf829873987c72dd33 Gajim], [https://github.com/psi-im/plugins/commit/d39789cb986644bcc4c34ca55a20b50357ae342a Psi] and [https://github.com/profanity-im/profanity/commit/0089fbcf0a7bf3ba92fa2ba657c5e7d70e395ed7 Profanity]
 +
 
 +
Chris Ballinger release version [https://github.com/ChatSecure/ChatSecure-iOS/releases/tag/v5.0.1 5.0.1] of ChatSecure.
 +
 
 +
The release of Movim 0.17 - Catalina includes [https://nl.movim.eu/?post/pubsub.movim.eu/Movim/87633da7-3963-4923-aabc-54ac5f6ad1d8 global chatroom search, a night theme, message retractation and UI changes].
 +
 
 +
Pix-Art Messenger will remove its [https://github.com/kriztan/Pix-Art-Messenger/blob/master/docs/encryption.md OTR legacy code by mid of 2020]. Experts on [https://github.com/kriztan/Pix-Art-Messenger/issues/427 any future OTRv4 implementation are invited to contribute new code].
 +
 
 +
Profanity has release notes for version [https://github.com/profanity-im/profanity/releases/tag/0.8.0 0.8.0] and [https://github.com/profanity-im/profanity/releases/tag/0.8.1 0.8.1] as well as a [https://profanity-im.github.io/blog/post/release-080/ blog post]. Continue reading about their [https://profanity-im.github.io/blog/post/lmc/ last message correction].
 +
 
 +
Gajim [https://gajim.org/post/2020-02-26-development-news-february/ Development News February 2020]: Redesigned invites, color improvements and a new Flatpak Nightly
 +
 
 +
Again, this month many changes and [https://monal.im/blog/mac-and-ips-improving-error-handling/ improvements] were implemented into [https://monal.im/blog/new-mac-and-ios-builds/ Monal 4.3] and [https://monal.im/blog/monal-4-4-for-ios-and-mac-are-out/ 4.4]. The app was refactored on Catalyst with [https://monal.im/blog/mac-catalyst-delayed-in-the-appstore-its-blocking-the-keychain/ fixes], removing of Google Talk, [https://monal.im/blog/monal-4-3-is-coming-out-in-about-a-week-even-in-france/ comeback of the app in France] again and UI changes to name the important blog posts and changes! Monal can now read [https://monal.im/blog/omemo-is-broken-in-general-across-the-ecosystem/ OMEMO 12-bytes IV] but from now limits it to [https://monal.im/blog/ios-4-3-beta-in-testing/ iOS 12 and 13].
 +
 
 +
[https://discourse.igniterealtime.org/t/pade-1-6-0-released/87226 Pàdé 1.6.0] was release by the Ignite Realtime community.
 +
 
 
https://tigase.net/beagleim-3.7-and-siskin-5.7-released/
 
https://tigase.net/beagleim-3.7-and-siskin-5.7-released/
  
 
==== Libraries ====
 
==== Libraries ====
 +
 +
Smack supports now Direct MUC Invitations, Stanza Content Encryption, Message Fastening and Message Retraction. Read Paul Schaub's (vanitasvitae) [https://blog.jabberhead.tk/2020/02/17/smack-some-more-busy-nights-and-12-bytes-of-iv/ blog post] which is also about the recent OMEMO's 12 bytes of IV changes. You want to implement a XEP to Smack? Start reading [https://blog.jabberhead.tk/2020/02/25/how-to-implement-a-xep-for-smack/ here]!
 +
 +
The switch from OMEMO IV 16 byte to 12 byte goes on for [https://github.com/igniterealtime/Smack/commit/1051cd2640616385f80997cad51bf7411e8e04cc Smack] and [https://github.com/Syndace/python-omemo/commit/45e56db33581c86c7e156115b7714bc32b6e154a Python]
 +
 +
[https://pkg.go.dev/mellium.im/xmpp?tab=doc XMPP library for Go.]
  
 
=== Other ===
 
=== Other ===
 +
 +
As already previously mentioned: [https://blog.prosody.im/introducing-snikket/ Snikket]!
 +
 +
The title says everything: [https://www.cryptologie.net/article/487/a-history-of-end-to-end-encryption-and-the-death-of-pgp/ A history of end-to-end encryption and the death of PGP]
 +
 +
How to setup Conversations - [https://hund.linuxkompis.se/2020/02/13/hur-du-kommer-igang-med-xmpp-pa-android.html på svenska]!
  
 
https://github.com/xsf/xeps/pull/903
 
https://github.com/xsf/xeps/pull/903
  
 
=== Services ===
 
=== Services ===
 +
 +
[https://twitter.com/jabberpl/status/1231030107273355265 JabberPL.org turns 15] - Congratulations! For their users they also [https://twitter.com/jabberpl/status/1231032793968279553 improved their service].
  
 
=== GSoC ===
 
=== GSoC ===
  
> Students Apply
+
[https://summerofcode.withgoogle.com/organizations/5474262808264704/ Google Summer of Code 2020 has been announced], some XMPP projects have already shown interest to mentor students. Remind the deadline is March 31, 2020 at 20:00 o'clock.
> Deadline March 31, 2020 at 20:00
 
> Students can register and submit their applications to mentor organizations.
 
> https://summerofcode.withgoogle.com/
 
  
 
=== Extensions and specifications ===
 
=== Extensions and specifications ===
 +
 +
With respect to the last month we mention what happened in February as well with respect to completeness. So due to the late publishing this is is likely already over yet.
  
 
==== Deferred ====
 
==== Deferred ====
 +
 +
- XEP-0386 (Bind 2.0)
  
 
==== Proposed ====
 
==== Proposed ====
Line 99: Line 147:
  
 
==== Last Call ====
 
==== Last Call ====
 +
 +
- This message constitutes notice of a Last Call for comments on
 +
XEP-0398.
 +
Title: User Avatar to vCard-Based Avatars Conversion
 +
Abstract: This specification describes a method for using PEP based avatars and
 +
vCard based avatars in parallel by having the user’s server do a
 +
conversion between the two.
 +
URL: https://xmpp.org/extensions/xep-0398.html
 +
This Last Call begins today and shall end at the close of business on
 +
2020-02-26.
 +
 +
- This message constitutes notice of a Last Call for comments on
 +
XEP-0402.
 +
Title: PEP Native Bookmarks
 +
Abstract: This specification defines a syntax and storage profile for keeping a
 +
list of chatroom bookmarks on the server.
 +
URL: https://xmpp.org/extensions/xep-0402.html
 +
This Last Call begins today and shall end at the close of business on
 +
2020-03-03.
 +
 +
==== Miscellaneous ====
 +
 +
'''ProtoXEP'''
 +
 +
The XMPP Extensions Editor has received a proposal for a new XEP.
 +
 +
- Title: Simple JSON Messaging
 +
Abstract: This specification proposes a simple mechanism by which applications
 +
can transfer data safely, without needing additional protocol design
 +
work. It is intended to provide a protocol that is trivial to
 +
implement and can be driven with a simple API.
 +
URL: https://xmpp.org/extensions/inbox/udt.html
 +
 +
- Title: Extended Channel Search
 +
Abstract: This specification provides a standardised protocol to search for
 +
public group chats. In contrast to XEP-0030 (Service Discovery), it
 +
works across multiple domains and in contrast to XEP-0055 (Jabber
 +
Search) it more clearly handles extensibility.
 +
URL: https://xmpp.org/extensions/inbox/extended-channel-search.html
 +
 +
- Title: Trust Messages
 +
Abstract: This document specifies a way to communicate the trust in public long-
 +
term keys used by end-to-end encryption protocols from one endpoint to
 +
another.
 +
URL: https://xmpp.org/extensions/inbox/trust-messages.html
 +
 +
The Council will decide in the next two weeks whether to accept this
 +
proposal as an official XEP.
 +
 +
'''Experimental'''
 +
 +
Version 0.1.0 of XEP-0434 (Trust Messages) has been released.
 +
Abstract: This document specifies a way to communicate the trust in public long-
 +
term keys used by end-to-end encryption protocols from one endpoint to
 +
another.
 +
Changelog: Accepted by vote of Council on 2020-02-19. (XEP Editor (jsc))
 +
URL: https://xmpp.org/extensions/xep-0434.html
 +
 +
'''Active'''
 +
 +
- Version 1.0.0 of XEP-0345 (Form of Membership Applications) has been
 +
released.
 +
Abstract: This specification outlines the form and mandatory content of
 +
membership applications.
 +
Changelog: Voted to Active by Board on 2019-03-07. Sorry for the delay in the
 +
editor queue. (XEP Editor (jsc))
 +
URL: https://xmpp.org/extensions/xep-0345.html
 +
 +
'''Draft'''
 +
 +
- Version 1.0.0 of XEP-0363 (HTTP File Upload) has been released.
 +
Abstract: This specification defines a protocol to request permissions from
 +
another entity to upload a file to a specific path on an HTTP server
 +
and at the same time receive a URL from which that file can later be
 +
downloaded again.
 +
Changelog: Accepted as Draft standard by the XMPP Council. Voted on 2020-01-29.
 +
(XEP Editor (jsc))
 +
URL: https://xmpp.org/extensions/xep-0363.html
 +
 +
- Version 1.0.0 of XEP-0363 (HTTP File Upload) has been released.
 +
Abstract: This specification defines a protocol to request permissions from
 +
another entity to upload a file to a specific path on an HTTP server
 +
and at the same time receive a URL from which that file can later be
 +
downloaded again.
 +
Changelog: Accepted as Draft standard by the XMPP Council. Voted on 2020-01-29.
 +
(XEP Editor (jsc))
 +
URL: https://xmpp.org/extensions/xep-0363.html
 +
 +
'''Call for Experience'''
 +
 +
''Due to the late publishing this is already over.''
 +
 +
- The XEP Editor would like to Call for Experience with XEP-0066 before
 +
presenting it to the Council for advancing it to Final status.
 +
During the Call for Experience, please answer the following questions:
 +
https://mail.jabber.org/pipermail/standards/2020-February/037071.html
 +
 +
- The XEP Editor would like to Call for Experience with XEP-0368 before
 +
presenting it to the Council for advancing it to Final status.
 +
During the Call for Experience, please answer the following questions:
 +
https://mail.jabber.org/pipermail/standards/2020-February/036992.html
 +
 +
- The XEP Editor would like to Call for Experience with XEP-0198 before
 +
presenting it to the Council for advancing it to Final status.
 +
During the Call for Experience, please answer the following questions:
 +
https://mail.jabber.org/pipermail/standards/2020-February/036986.html
  
 
=== Thanks all! ===
 
=== Thanks all! ===
Line 104: Line 258:
 
This XMPP Newsletter is produced collaboratively by the community.
 
This XMPP Newsletter is produced collaboratively by the community.
  
Thanks to xxx, yyy, zzz for their help in creating it!
+
Thanks to Aleja, emus, Licaon_Kter, MDosch, Neustradamus, Nyco, pep., Sven, Vanitasvitae, Winfried, Wurstsalat  for their help in creating it!
  
 
Please share the news on "social networks":
 
Please share the news on "social networks":

Revision as of 20:55, 28 March 2020

Status:

  • Links collection: WIP
  • Newsletter: WIP
  • Blog post:
  • Social media:
  • Translations:

Warning: this wiki page does not represent the final edits

Everyone go for decentralization - no joke! 01 Apr 2020

[ Friendly, human introduction for the month (remove this mention before publishing) ]

Intro

Welcome to the XMPP newsletter covering the month of February and March 2020.

We had a big delay releasing and finalizing the February release of the XMPP Newsletter. So the decision was made to combine both into this version - apologies!

Anyway, we are always happy to contributors - just come along and talk to us in the [Comm-Team MUC xmpp:commteam@muc.xmpp.org?join] and thereby help us sustain this as a community effort, which process is fully documented.

Subscribe by email: https://tinyletter.com/xmpp

Articles

A nice and short summary about XMPP - en español!

Marvin Schirrmacher analysed WhatsApp's VoIP protocol. He extracted cryptographic keys and also showed that code obscurity does not finally protect against attackers. Further readings on GitHub here, here and here.

Mobile Kommunikation: zeitgemäß und rechtskonform German article about mobile communication in authorities mentioning MOKA/XMPP.

Daniel Gultsch (iNPUTmice) published several posts commenting on the situation on OMEMO initial vectors.

A discussion (Spanish) on Quey compared the performance of XMPP and Matrix. Seems that XMPP outperforms easily!

Liz Flynn scheduled a notification for IETF-107 for Messaging Layer Security (MLS). You can read the current architecture draft here.

After a recent secruity flaw in WhatsApp groups, the FSFE recommends XMPP as decentral and open alternative amd solution. The XSF tweeted about this already.

debxwoody has started to build a place for German users of XMPP including social media, mailing list, homepage and a blog. He is calling for supporters!

After the Prosody team released Snikket, Alexander Gnauck explains how to run it on your NAS.

Sam Whited wrote about the Go XMPP library.

Turns out [Grindr uses #XMPP for their in-app chat https://mastodon.xyz/@jcbrand/103757814572529323]

Newsletter translations

Videos

Tutorials

Events

Report from Sprints DU and BER https://hackmd.syndace.com/s/r1fNElZSL# Please stay informed about the Berlin Sprint due to the COVID-19 situation.(And yes the Düsseldorf Sprint already happened!)

On 1-2 February, FOSDEM, was held in Brussels, Belgium. As usual the XMPP community coordinated the Real-Time Lounge, a corner where several open source projects around Real Time Communication can present themselves. At the XMPP booth there were lots of nice conversations with FOSDEM visitors. The easy onboarding of Snikket was one of the eye catchers at the booth. In the Real Time developers room thee was a talk about the modularity of the XMPP protocol by Winfried Tilanus.

As usual, before FOSDEM a part of the XMPP community gathered for XMPP summit 24. Over the course of two days many aspects of the XMPP protocol were discussed, including onboarding, 'rich presence', several aspects of encryption, MIX, Bind/SASL, Stickers and rich markup. The attendants regarded this summit as very productive and many of the discussions already resulted in proposed protocol extensions and patches to existing extensions.


Software releases

Servers

Jackal (XMPP server written in Go) was released in version 0.82.

The Ignite Realtime Community releases version 4.5.1 of Openfire with fixes and improvements you can review in their changelogs. REST API Openfire plugin was also released in version 1.4.0.

Erlang Solutions were writing about improvements of push notifications within MongooseIM. Mongoose also release MongooseIM version 3.6.1 and MongoosePush version 2.0.1.

ProcessOne released their [xmpp-notifer v1.0.0 https://blog.process-one.net/xmpp-notifer-v1-0-0/] which allows to send notification to XMPP.

https://blog.process-one.net/go-xmpp-v0-5-0/

Clients and applications

Tigase has released new versions of BeagleIM and Siskin.

Goffi has released his SàT progress note 2020-W08.

A bunch of clients have switch OMEMO IV 16 byte to 12 byte. Those were Conversations, Gajim, Psi and Profanity

Chris Ballinger release version 5.0.1 of ChatSecure.

The release of Movim 0.17 - Catalina includes global chatroom search, a night theme, message retractation and UI changes.

Pix-Art Messenger will remove its OTR legacy code by mid of 2020. Experts on any future OTRv4 implementation are invited to contribute new code.

Profanity has release notes for version 0.8.0 and 0.8.1 as well as a blog post. Continue reading about their last message correction.

Gajim Development News February 2020: Redesigned invites, color improvements and a new Flatpak Nightly

Again, this month many changes and improvements were implemented into Monal 4.3 and 4.4. The app was refactored on Catalyst with fixes, removing of Google Talk, comeback of the app in France again and UI changes to name the important blog posts and changes! Monal can now read OMEMO 12-bytes IV but from now limits it to iOS 12 and 13.

Pàdé 1.6.0 was release by the Ignite Realtime community.

https://tigase.net/beagleim-3.7-and-siskin-5.7-released/

Libraries

Smack supports now Direct MUC Invitations, Stanza Content Encryption, Message Fastening and Message Retraction. Read Paul Schaub's (vanitasvitae) blog post which is also about the recent OMEMO's 12 bytes of IV changes. You want to implement a XEP to Smack? Start reading here!

The switch from OMEMO IV 16 byte to 12 byte goes on for Smack and Python

XMPP library for Go.

Other

As already previously mentioned: Snikket!

The title says everything: A history of end-to-end encryption and the death of PGP

How to setup Conversations - på svenska!

https://github.com/xsf/xeps/pull/903

Services

JabberPL.org turns 15 - Congratulations! For their users they also improved their service.

GSoC

Google Summer of Code 2020 has been announced, some XMPP projects have already shown interest to mentor students. Remind the deadline is March 31, 2020 at 20:00 o'clock.

Extensions and specifications

With respect to the last month we mention what happened in February as well with respect to completeness. So due to the late publishing this is is likely already over yet.

Deferred

- XEP-0386 (Bind 2.0)

Proposed

New

Updated

Obsoleted

Last Call

- This message constitutes notice of a Last Call for comments on XEP-0398. Title: User Avatar to vCard-Based Avatars Conversion Abstract: This specification describes a method for using PEP based avatars and vCard based avatars in parallel by having the user’s server do a conversion between the two. URL: https://xmpp.org/extensions/xep-0398.html This Last Call begins today and shall end at the close of business on 2020-02-26.

- This message constitutes notice of a Last Call for comments on XEP-0402. Title: PEP Native Bookmarks Abstract: This specification defines a syntax and storage profile for keeping a list of chatroom bookmarks on the server. URL: https://xmpp.org/extensions/xep-0402.html This Last Call begins today and shall end at the close of business on 2020-03-03.

Miscellaneous

ProtoXEP

The XMPP Extensions Editor has received a proposal for a new XEP.

- Title: Simple JSON Messaging Abstract: This specification proposes a simple mechanism by which applications can transfer data safely, without needing additional protocol design work. It is intended to provide a protocol that is trivial to implement and can be driven with a simple API. URL: https://xmpp.org/extensions/inbox/udt.html

- Title: Extended Channel Search Abstract: This specification provides a standardised protocol to search for public group chats. In contrast to XEP-0030 (Service Discovery), it works across multiple domains and in contrast to XEP-0055 (Jabber Search) it more clearly handles extensibility. URL: https://xmpp.org/extensions/inbox/extended-channel-search.html

- Title: Trust Messages Abstract: This document specifies a way to communicate the trust in public long- term keys used by end-to-end encryption protocols from one endpoint to another. URL: https://xmpp.org/extensions/inbox/trust-messages.html

The Council will decide in the next two weeks whether to accept this proposal as an official XEP.

Experimental

Version 0.1.0 of XEP-0434 (Trust Messages) has been released. Abstract: This document specifies a way to communicate the trust in public long- term keys used by end-to-end encryption protocols from one endpoint to another. Changelog: Accepted by vote of Council on 2020-02-19. (XEP Editor (jsc)) URL: https://xmpp.org/extensions/xep-0434.html

Active

- Version 1.0.0 of XEP-0345 (Form of Membership Applications) has been released. Abstract: This specification outlines the form and mandatory content of membership applications. Changelog: Voted to Active by Board on 2019-03-07. Sorry for the delay in the editor queue. (XEP Editor (jsc)) URL: https://xmpp.org/extensions/xep-0345.html

Draft

- Version 1.0.0 of XEP-0363 (HTTP File Upload) has been released. Abstract: This specification defines a protocol to request permissions from another entity to upload a file to a specific path on an HTTP server and at the same time receive a URL from which that file can later be downloaded again. Changelog: Accepted as Draft standard by the XMPP Council. Voted on 2020-01-29. (XEP Editor (jsc)) URL: https://xmpp.org/extensions/xep-0363.html

- Version 1.0.0 of XEP-0363 (HTTP File Upload) has been released. Abstract: This specification defines a protocol to request permissions from another entity to upload a file to a specific path on an HTTP server and at the same time receive a URL from which that file can later be downloaded again. Changelog: Accepted as Draft standard by the XMPP Council. Voted on 2020-01-29. (XEP Editor (jsc)) URL: https://xmpp.org/extensions/xep-0363.html

Call for Experience

Due to the late publishing this is already over.

- The XEP Editor would like to Call for Experience with XEP-0066 before presenting it to the Council for advancing it to Final status. During the Call for Experience, please answer the following questions: https://mail.jabber.org/pipermail/standards/2020-February/037071.html

- The XEP Editor would like to Call for Experience with XEP-0368 before presenting it to the Council for advancing it to Final status. During the Call for Experience, please answer the following questions: https://mail.jabber.org/pipermail/standards/2020-February/036992.html

- The XEP Editor would like to Call for Experience with XEP-0198 before presenting it to the Council for advancing it to Final status. During the Call for Experience, please answer the following questions: https://mail.jabber.org/pipermail/standards/2020-February/036986.html

Thanks all!

This XMPP Newsletter is produced collaboratively by the community.

Thanks to Aleja, emus, Licaon_Kter, MDosch, Neustradamus, Nyco, pep., Sven, Vanitasvitae, Winfried, Wurstsalat for their help in creating it!

Please share the news on "social networks":

License

This newsletter is published under CC by-sa license: https://creativecommons.org/licenses/by-sa/4.0/