Difference between revisions of "XMPP Newsletter March 2020"

Jump to navigation Jump to search
Change information on postponing as a top info box.
(Change information on postponing as a top info box.)
 
(13 intermediate revisions by the same user not shown)
Line 1: Line 1:
{{event}}
{| cellspacing="3"
| colspan=2 width="100%" class="MainPageBG" style="border: 1px solid #f00000; color: #000; background-color: #f5a7a7"|
<div style="padding: .4em .9em .4em">
All the information of this newsletter was postponed to the next release, the [https://wiki.xmpp.org/web/XMPP_Newsletter_April_2020 April version].
</div>
|}
=== PLEASE READ THIS ===
All the information of this newsletter was postponed to the next
release, the April version, please review here:
https://wiki.xmpp.org/web/XMPP_Newsletter_April_2020
Status:
Status:
* Links collection: DONE
* Links collection: DONE
* Newsletter: WIP
* Newsletter: DONE
* Blog post:
* Blog post: WIP
* Social media:
* Social media:
* Translations:
* Translations:
Line 8: Line 20:
Warning: this wiki page does not represent the final edits
Warning: this wiki page does not represent the final edits


=== Newsletter subject/title ===
=== Everyone go for decentralisation! 15 Mar 2020 ===
 
[ Friendly, human introduction for the month (remove this mention before publishing) ]


=== Intro ===
=== Intro ===


Welcome to the XMPP newsletter covering the month of February 2020 (release in March 2020).
Welcome to the XMPP newsletter covering the month of February 2020. We are very sorry for the late publish. :(


Help us sustain this as a community effort, which [https://wiki.xmpp.org/web/News_and_Articles_for_the_next_XMPP_Newsletter process is fully documented].
Help us sustain this as a community effort, which [https://wiki.xmpp.org/web/News_and_Articles_for_the_next_XMPP_Newsletter process is fully documented].
Line 21: Line 31:


[https://tinyletter.com/xmpp Subscribe] to receive the next edition in your inbox!
[https://tinyletter.com/xmpp Subscribe] to receive the next edition in your inbox!
==== Newsletter translations ====


The translations of the XMPP Newsletter will be release here:
The translations of the XMPP Newsletter will be release here:
Line 27: Line 39:
- [https://news.jabberfr.org/category/newsletter/ French]
- [https://news.jabberfr.org/category/newsletter/ French]
- [https://www.jabber.de/ Spanish]
- [https://www.jabber.de/ Spanish]


=== Articles ===
=== Articles ===


https://www.altaruru.com/que-es-xmpp/  
A nice and short summary about XMPP - en [https://www.altaruru.com/que-es-xmpp/ español]!


Marvin Schirrmacher [https://medium.com/@schirrmacher/analyzing-whatsapp-calls-176a9e776213 analysed WhatsApp's VoIP protocol]. He extracted cryptographic keys and also showed that code obscurity does not finally protect against attackers. Further readings on GitHub [https://github.com/schirrmacher/files/blob/master/WhatsApp%20VoIP%20Protocol.pdf here], [https://github.com/schirrmacher/files/blob/master/WhatsApp here] and [https://github.com/schirrmacher/files/blob/master/WhatsAppCore here].
Marvin Schirrmacher [https://medium.com/@schirrmacher/analyzing-whatsapp-calls-176a9e776213 analysed WhatsApp's VoIP protocol]. He extracted cryptographic keys and also showed that code obscurity does not finally protect against attackers. Further readings on GitHub [https://github.com/schirrmacher/files/blob/master/WhatsApp%20VoIP%20Protocol.pdf here], [https://github.com/schirrmacher/files/blob/master/WhatsApp here] and [https://github.com/schirrmacher/files/blob/master/WhatsAppCore here].
Line 36: Line 49:
[https://www.behoerden-spiegel.de/2020/02/12/mobile-kommunikation-zeitgemaess-und-rechtskonform/ Mobile Kommunikation: zeitgemäß und rechtskonform] German article about mobile communication in authorities mentioning MOKA/XMPP.
[https://www.behoerden-spiegel.de/2020/02/12/mobile-kommunikation-zeitgemaess-und-rechtskonform/ Mobile Kommunikation: zeitgemäß und rechtskonform] German article about mobile communication in authorities mentioning MOKA/XMPP.


https://blog.jabberhead.tk/2020/02/17/smack-some-more-busy-nights-and-12-bytes-of-iv/
Daniel Gultsch (iNPUTmice) [http://nitter.net/iNPUTmice/status/1228950491805167617#m published several posts] commenting on the situation on OMEMO initial vectors.
 
https://blog.jabberhead.tk/2020/02/25/how-to-implement-a-xep-for-smack/
 
http://nitter.net/iNPUTmice/status/1228950491805167617#m


A discussion (Spanish) on Quey compared the [https://quey.org/@GatoOscuro/103685251805747041 performance of XMPP and Matrix]. Seems that XMPP outperforms easily!
A discussion (Spanish) on Quey compared the [https://quey.org/@GatoOscuro/103685251805747041 performance of XMPP and Matrix]. Seems that XMPP outperforms easily!
Line 46: Line 55:
Liz Flynn scheduled a [https://datatracker.ietf.org/wg/mls/history/ notification for IETF-107] for Messaging Layer Security (MLS). You can read the current architecture draft [https://datatracker.ietf.org/doc/draft-ietf-mls-architecture/ here].
Liz Flynn scheduled a [https://datatracker.ietf.org/wg/mls/history/ notification for IETF-107] for Messaging Layer Security (MLS). You can read the current architecture draft [https://datatracker.ietf.org/doc/draft-ietf-mls-architecture/ here].


After a recent [https://www.dw.com/en/whatsapp-security-flaw-over-60000-groups-still-accessible-online/a-52543414 secruity flaw in WhatsApp groups], the FSFE recommends XMPP as [https://fsfe.org/news/2020/news-20200228-01.en.html decentral and open alternative amd solution]. The XSF tweeted about this already. LINK
After a recent [https://www.dw.com/en/whatsapp-security-flaw-over-60000-groups-still-accessible-online/a-52543414 secruity flaw in WhatsApp groups], the FSFE recommends XMPP as [https://fsfe.org/news/2020/news-20200228-01.en.html decentral and open alternative amd solution]. The XSF tweeted about this already.
https://post.lurk.org/@pep/103736689790093261


debxwoody has started to build a [https://xmpp-messenger.de/index.html place for German users of XMPP] including social media, mailing list, homepage and a blog. He is calling for supporters!
debxwoody has started to build a [https://xmpp-messenger.de/index.html place for German users of XMPP] including social media, mailing list, homepage and a blog. He is calling for supporters!


https://www.ag-software.net/2020/02/28/run-snikket-on-your-nas/
After the Prosody team [https://blog.prosody.im/introducing-snikket/ released Snikket], Alexander Gnauck explains how to run it on your [https://www.ag-software.net/2020/02/28/run-snikket-on-your-nas/ NAS].


Sam Whited wrote about the [https://blog.samwhited.com/2020/02/extensions-in-mellium/ Go XMPP library].
Sam Whited wrote about the [https://blog.samwhited.com/2020/02/extensions-in-mellium/ Go XMPP library].
==== Newsletter translations ====


=== Videos ===
=== Videos ===
Line 63: Line 69:
=== Events ===
=== Events ===


In March there will be two XMPP Sprints in [https://wiki.xmpp.org/web/Sprints/2020_March_Duesseldorf Düsseldorf] and [https://wiki.xmpp.org/web/Sprints/2020_March_Berlin Berlin]. Feel free to join and support the community and their work!
In March there will be two XMPP Sprints in [https://wiki.xmpp.org/web/Sprints/2020_March_Duesseldorf Düsseldorf] and [https://wiki.xmpp.org/web/Sprints/2020_March_Berlin Berlin]. Feel free to join and support the community and their work! Please stay informed about the Berlin Sprint due to the COVID-19 situation.''(And yes the Düsseldorf Sprint already happened!)''


On 1-2 February, [https://fosdem.org/2020/ FOSDEM], was held in Brussels, Belgium. As usual the XMPP community coordinated the Real-Time Lounge, a corner where several open source projects around Real Time Communication can present themselves. At the XMPP booth there were lots of nice conversations with FOSDEM visitors. The easy onboarding of Snikket was one of the eye catchers at the booth. In the Real Time developers room thee was a talk about the [https://fosdem.org/2020/schedule/event/xmpp/ modularity of the XMPP protocol] by Winfried Tilanus.
On 1-2 February, [https://fosdem.org/2020/ FOSDEM], was held in Brussels, Belgium. As usual the XMPP community coordinated the Real-Time Lounge, a corner where several open source projects around Real Time Communication can present themselves. At the XMPP booth there were lots of nice conversations with FOSDEM visitors. The easy onboarding of Snikket was one of the eye catchers at the booth. In the Real Time developers room thee was a talk about the [https://fosdem.org/2020/schedule/event/xmpp/ modularity of the XMPP protocol] by Winfried Tilanus.
Line 73: Line 79:
==== Servers ====
==== Servers ====


https://github.com/ortuman/jackal/releases/tag/v0.8.2
Jackal (XMPP server written in Go) was [https://github.com/ortuman/jackal/releases/tag/v0.8.2 released in version 0.82].


https://discourse.igniterealtime.org/t/openfire-4-5-1-is-released/87183
The Ignite Realtime Community [https://discourse.igniterealtime.org/t/openfire-4-5-1-is-released/87183 releases version 4.5.1] of Openfire with fixes and improvements you can review in their [http://download.igniterealtime.org/openfire/docs/latest/changelog.html changelogs]. REST API Openfire plugin was also released in [https://discourse.igniterealtime.org/t/rest-api-openfire-plugin-1-4-0-released/87286 version 1.4.0].


https://www.erlang-solutions.com/blog/improving-push-notifications-with-mongooseim.html
Erlang Solutions were writing about [https://www.erlang-solutions.com/blog/improving-push-notifications-with-mongooseim.html improvements of push notifications within MongooseIM].
 
Mongoose also release MongooseIM [https://github.com/esl/MongooseIM/releases/tag/3.6.1 version 3.6.1] and [https://github.com/esl/MongoosePush/releases/tag/2.0.1 MongoosePush version 2.0.1].
Mongoose release MongooseIM [https://github.com/esl/MongooseIM/releases/tag/3.6.1 3.6.1] and [https://github.com/esl/MongoosePush/releases/tag/2.0.1 MongoosePush 2.0.1]
 
https://discourse.igniterealtime.org/t/rest-api-openfire-plugin-1-4-0-released/87286


==== Clients and applications ====
==== Clients and applications ====


https://tigase.net/beagleim-3.6-and-siskin-5.6-released/
Tigase has released new [https://tigase.net/beagleim-3.6-and-siskin-5.6-released/ versions of BeagleIM and Siskin].


https://www.goffi.org/b/HsWxUHzXdvsH7Syrx8f6Ne/progress-note
Goffi has released his SàT [https://www.goffi.org/b/HsWxUHzXdvsH7Syrx8f6Ne/progress-note progress note 2020-W08].


A bunch of clients have switch OMEMO IV 16 byte to 12 byte. Those were [https://github.com/siacs/Conversations/releases/tag/2.7.0 Conversations], [https://dev.gajim.org/gajim/gajim-plugins/commit/25cba9eea702336e82f75faf829873987c72dd33 Gajim], [https://github.com/psi-im/plugins/commit/d39789cb986644bcc4c34ca55a20b50357ae342a Psi] and [https://github.com/profanity-im/profanity/commit/0089fbcf0a7bf3ba92fa2ba657c5e7d70e395ed7 Profanity]
A bunch of clients have switch OMEMO IV 16 byte to 12 byte. Those were [https://github.com/siacs/Conversations/releases/tag/2.7.0 Conversations], [https://dev.gajim.org/gajim/gajim-plugins/commit/25cba9eea702336e82f75faf829873987c72dd33 Gajim], [https://github.com/psi-im/plugins/commit/d39789cb986644bcc4c34ca55a20b50357ae342a Psi] and [https://github.com/profanity-im/profanity/commit/0089fbcf0a7bf3ba92fa2ba657c5e7d70e395ed7 Profanity]
Line 93: Line 96:
Chris Ballinger release version [https://github.com/ChatSecure/ChatSecure-iOS/releases/tag/v5.0.1 5.0.1] of ChatSecure.
Chris Ballinger release version [https://github.com/ChatSecure/ChatSecure-iOS/releases/tag/v5.0.1 5.0.1] of ChatSecure.


The release of Movim 0.17 - Catalina includes https://nl.movim.eu/?post/pubsub.movim.eu/Movim/87633da7-3963-4923-aabc-54ac5f6ad1d8
The release of Movim 0.17 - Catalina includes [https://nl.movim.eu/?post/pubsub.movim.eu/Movim/87633da7-3963-4923-aabc-54ac5f6ad1d8 global chatroom search, a night theme, message retractation and UI changes].


Pix-Art Messenger will remove its [https://github.com/kriztan/Pix-Art-Messenger/blob/master/docs/encryption.md OTR legacy code by mid of 2020]. Experts on [https://github.com/kriztan/Pix-Art-Messenger/issues/427 any future OTRv4 implementation are invited to contribute new code].  
Pix-Art Messenger will remove its [https://github.com/kriztan/Pix-Art-Messenger/blob/master/docs/encryption.md OTR legacy code by mid of 2020]. Experts on [https://github.com/kriztan/Pix-Art-Messenger/issues/427 any future OTRv4 implementation are invited to contribute new code].  


https://github.com/profanity-im/profanity/releases/tag/0.8.0
Profanity has release notes for version [https://github.com/profanity-im/profanity/releases/tag/0.8.0 0.8.0] and [https://github.com/profanity-im/profanity/releases/tag/0.8.1 0.8.1] as well as a [https://profanity-im.github.io/blog/post/release-080/ blog post]. Continue reading about their [https://profanity-im.github.io/blog/post/lmc/ last message correction].
https://profanity-im.github.io/blog/post/release-080/
https://github.com/profanity-im/profanity/releases/tag/0.8.1
https://profanity-im.github.io/blog/post/lmc/


Gajim [https://gajim.org/post/2020-02-26-development-news-february/ Development News February 2020]: Redesigned invites, color improvements and a new Flatpak Nightly
Gajim [https://gajim.org/post/2020-02-26-development-news-february/ Development News February 2020]: Redesigned invites, color improvements and a new Flatpak Nightly


Refactored Monal on Catalyst with fixes and UI changes, but limits it to iOS 12 and 13, when released it will come back to the France store too, pushed IV to... See nitter link
Again, this month many changes and [https://monal.im/blog/mac-and-ips-improving-error-handling/ improvements] were implemented into [https://monal.im/blog/new-mac-and-ios-builds/ Monal 4.3] and [https://monal.im/blog/monal-4-4-for-ios-and-mac-are-out/ 4.4]. The app was refactored on Catalyst with [https://monal.im/blog/mac-catalyst-delayed-in-the-appstore-its-blocking-the-keychain/ fixes], removing of Google Talk, [https://monal.im/blog/monal-4-3-is-coming-out-in-about-a-week-even-in-france/ comeback of the app in France] again and UI changes to name the important blog posts and changes! Monal can now read [https://monal.im/blog/omemo-is-broken-in-general-across-the-ecosystem/ OMEMO 12-bytes IV] but from now limits it to [https://monal.im/blog/ios-4-3-beta-in-testing/ iOS 12 and 13].


https://monal.im/blog/mac-catalyst-delayed-in-the-appstore-its-blocking-the-keychain/
[https://discourse.igniterealtime.org/t/pade-1-6-0-released/87226 Pàdé 1.6.0] was release by the Ignite Realtime community.
https://monal.im/blog/removing-google-talk/
https://monal.im/blog/new-mac-and-ios-beta-bre-updated/
https://monal.im/blog/xmpp-is-weird/
https://monal.im/blog/monal-ios-is-available-in-france/
https://monal.im/blog/expect-to-see-4-3-this-week/
https://monal.im/blog/mac-and-ips-improving-error-handling/
https://monal.im/blog/new-builds-again/
https://monal.im/blog/monal-4-3-is-coming-out-in-about-a-week-even-in-france/
https://monal.im/blog/new-mac-and-ios-builds/
https://monal.im/blog/catalyst-looks-more-like-a-mac-app/
https://monal.im/blog/sending-encrypted-images/
https://monal.im/blog/ios-4-3-beta-in-testing/
 
https://discourse.igniterealtime.org/t/pade-1-6-0-released/87226


==== Libraries ====
==== Libraries ====


https://blog.jabberhead.tk/2020/02/17/smack-some-more-busy-nights-and-12-bytes-of-iv/
Smack supports now Direct MUC Invitations, Stanza Content Encryption, Message Fastening and Message Retraction. Read Paul Schaub's (vanitasvitae) [https://blog.jabberhead.tk/2020/02/17/smack-some-more-busy-nights-and-12-bytes-of-iv/ blog post] which is also about the recent OMEMO's 12 bytes of IV changes. You want to implement a XEP to Smack? Start reading [https://blog.jabberhead.tk/2020/02/25/how-to-implement-a-xep-for-smack/ here]!


The switch from OMEMO IV 16 byte to 12 byte goes on for [https://github.com/igniterealtime/Smack/commit/1051cd2640616385f80997cad51bf7411e8e04cc Smack] and [https://github.com/Syndace/python-omemo/commit/45e56db33581c86c7e156115b7714bc32b6e154a Python]
The switch from OMEMO IV 16 byte to 12 byte goes on for [https://github.com/igniterealtime/Smack/commit/1051cd2640616385f80997cad51bf7411e8e04cc Smack] and [https://github.com/Syndace/python-omemo/commit/45e56db33581c86c7e156115b7714bc32b6e154a Python]
Line 132: Line 118:
=== Other ===
=== Other ===


https://blog.prosody.im/introducing-snikket/
As already previously mentioned: [https://blog.prosody.im/introducing-snikket/ Snikket]!


https://www.cryptologie.net/article/487/a-history-of-end-to-end-encryption-and-the-death-of-pgp/
The title says everything: [https://www.cryptologie.net/article/487/a-history-of-end-to-end-encryption-and-the-death-of-pgp/ A history of end-to-end encryption and the death of PGP]
 
https://hund.linuxkompis.se/2020/02/13/hur-du-kommer-igang-med-xmpp-pa-android.html
How to setup Conversations - [https://hund.linuxkompis.se/2020/02/13/hur-du-kommer-igang-med-xmpp-pa-android.html på svenska]!


=== Services ===
=== Services ===


https://twitter.com/jabberpl/status/1231030107273355265
[https://twitter.com/jabberpl/status/1231030107273355265 JabberPL.org turns 15] - Congratulations! For their users they also [https://twitter.com/jabberpl/status/1231032793968279553 improved their service].
 
https://twitter.com/jabberpl/status/1231032793968279553


=== GSoC ===
=== GSoC ===
[https://summerofcode.withgoogle.com/organizations/5474262808264704/ Google Summer of Code 2020 has been announced], some XMPP projects have already shown interest to mentor students.


=== Extensions and specifications ===
=== Extensions and specifications ===


==== Deferred ====
==== Deferred ====
- XEP-0386 (Bind 2.0)
- XEP-0386 (Bind 2.0)


==== Last Call ====
==== Last Call ====
''Due to the late publishing this is already over.''
- This message constitutes notice of a Last Call for comments on
- This message constitutes notice of a Last Call for comments on
XEP-0398.
XEP-0398.
Line 172: Line 161:


==== Miscellaneous ====
==== Miscellaneous ====
'''ProtoXEP'''
'''ProtoXEP'''


Line 239: Line 229:


'''Call for Experience'''
'''Call for Experience'''
''Due to the late publishing this is already over.''


- The XEP Editor would like to Call for Experience with XEP-0066 before
- The XEP Editor would like to Call for Experience with XEP-0066 before
Line 252: Line 244:
- The XEP Editor would like to Call for Experience with XEP-0198 before
- The XEP Editor would like to Call for Experience with XEP-0198 before
presenting it to the Council for advancing it to Final status.
presenting it to the Council for advancing it to Final status.
During the Call for Experience, please answer the following questions: https://mail.jabber.org/pipermail/standards/2020-February/036986.html
During the Call for Experience, please answer the following questions:  
https://mail.jabber.org/pipermail/standards/2020-February/036986.html


=== Thanks all! ===
=== Thanks all! ===
367

edits

Navigation menu