4 ms·
You're still trusting the server. This is only a gain if you were already the one running the XMPP server with everyone you talk to. Use a real end-to-end solu
by ultramancool 12y ago
You're still trusting the server. This is only a gain if you were already the one running the XMPP server with everyone you talk to.
Use a real end-to-end solution to this problem: OTR.
- MattJ100 12y agoOTR only protects the text content of your messages. It doesn't protect the metadata, or many of the other features XMPP provides from status to file transfers and voice/video calls.
- shmerl 12y agoFor media calls there is ZRTP.
- MattJ100 12y agoI'm not an expert in this field, but as far as I know ZRTP trust is bootstrapped from the signalling channel (in this case your XMPP connection). So a MITM there could also MITM your voice/video. And again, your metadata and signalling would still be exposed without encryption - along with your IP addresses (ICE candidates), etc.