5 ms·

> once-popular servers have stopped accepting new registrations That's why providers.xmpp.net gives a good overview on where to sign up. The clients I know of

by zaik 2y ago

> once-popular servers have stopped accepting new registrations That's why providers.xmpp.net gives a good overview on where to sign up. The clients I know of also allow you to create an XMPP address directly from the app. The whole ordeal is to choose an username and a password then. > involved in some nation state espionage activities This is really more of a TLS thing than an XMPP thing, since the attacker was able to intercept traffic with a valid TLS certificate. Of course the second line of defense is E2EE here, but arguably, since the XMPP community was directly affected, they learned (monitoring certificate logs, channel binding , DANE, https://certwatch.xmpp.net/ https://certwatch.xmpp.net/ ) a lot about defending even against this level of attacker from this incident. > still current best but unmaintained [client] I wonder which one you are talking about. My recommendations are Conversations, Gajim and Monal. They're all modern clients, actively maintained and have been around for a while now.

lxgr 2y ago
> My recommendations are Conversations, Gajim and Monal. Conversations is indeed almost perfect on Android (I really wish it could use optionally use XEP-0357), but I mainly use iOS. Monal looks nice, but I'm just generally wary of these single-engineer passion projects – ChatSecure looked nice before as well, and Monal could see the same fate any day. > That's why providers.xmpp.net gives a good overview on where to sign up. [...] The whole ordeal is to choose an username and a password then. The problem isn't finding one that lets you register, it's finding one that will reliably still be around in a few years. If XMPP were to offer a lightweight, DNS-based "identity handle", this wouldn't be as much of a problem (as clients could back up your contact list and keys etc.), but as it is, if a server ever disappears, your lose everything. That said, I do trust the people running conversations.im, and it even seems to be free at this point! (Down from EUR 10/year, which is nothing if you value XMPP, but an almost insurmountable hassle when trying to onboard any friends/family.)

by zaik 2y ago

lxgr 2y ago

> My recommendations are Conversations, Gajim and Monal. Conversations is indeed almost perfect on Android (I really wish it could use optionally use XEP-0357), but I mainly use iOS. Monal looks nice, but I'm just generally wary of these single-engineer passion projects – ChatSecure looked nice before as well, and Monal could see the same fate any day. > That's why providers.xmpp.net gives a good overview on where to sign up. [...] The whole ordeal is to choose an username and a password then. The problem isn't finding one that lets you register, it's finding one that will reliably still be around in a few years. If XMPP were to offer a lightweight, DNS-based "identity handle", this wouldn't be as much of a problem (as clients could back up your contact list and keys etc.), but as it is, if a server ever disappears, your lose everything. That said, I do trust the people running conversations.im, and it even seems to be free at this point! (Down from EUR 10/year, which is nothing if you value XMPP, but an almost insurmountable hassle when trying to onboard any friends/family.)