This commit is contained in:
Bob Mottram 2016-11-12 21:12:22 +00:00
parent ac34ddf9ef
commit 2c2f96fc14
2 changed files with 21 additions and 21 deletions

View File

@ -16,7 +16,7 @@
</center>
#+END_EXPORT
Most people know XMPP as "/Jabber/" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as if is on Freedombone, can provide the best chat messaging security currently available.
Most people know XMPP as "/Jabber/" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as it is on Freedombone, can provide the best chat messaging security currently available.
With regard to chat apps you might have read a lot of stuff about /end-to-end security/. That's important, but to also protect the metadata of who sends messages to who the data needs to be onion routed (wrapped in multiple layers of routing encryption), and that's something which most popular chat apps don't provide. Also beware of chat apps which fundamentally rely upon Google's infrastructure. You can be sure that they extensively data mine everything and will be able to reconstruct your social graph if that's at all technically feasible, then pass that to whatever governments they're friendly with or trying to lobby.

View File

@ -3,7 +3,7 @@
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<!-- 2016-11-12 Sat 21:07 -->
<!-- 2016-11-12 Sat 21:12 -->
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title></title>
@ -248,7 +248,7 @@ for the JavaScript code in this tag.
</center>
<p>
Most people know XMPP as "<i>Jabber</i>" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as if is on Freedombone, can provide the best chat messaging security currently available.
Most people know XMPP as "<i>Jabber</i>" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as it is on Freedombone, can provide the best chat messaging security currently available.
</p>
<p>
@ -259,9 +259,9 @@ With regard to chat apps you might have read a lot of stuff about <i>end-to-end
A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
</p>
<div id="outline-container-orgfc8b0bf" class="outline-2">
<h2 id="orgfc8b0bf">Using with Gajim</h2>
<div class="outline-text-2" id="text-orgfc8b0bf">
<div id="outline-container-orgfdc65c1" class="outline-2">
<h2 id="orgfdc65c1">Using with Gajim</h2>
<div class="outline-text-2" id="text-orgfdc65c1">
<p>
In mid 2016 <a href="https://gajim.org/">Gajim</a> became the first desktop XMPP client to support the <a href="https://en.wikipedia.org/wiki/OMEMO">OMEMO end-to-end security standard</a>, which is superior to the more traditional <a href="https://en.wikipedia.org/wiki/Off-the-Record_Messaging">OTR</a> since it also includes multi-user chat and the ratcheting mechanism pioneered by Open Whisper Systems. To install it:
</p>
@ -305,9 +305,9 @@ If you wish to use OpenPGP to encrypt your messages then go to <b>Edit/Accounts<
</div>
</div>
<div id="outline-container-orgc35e2cb" class="outline-2">
<h2 id="orgc35e2cb">Using with Profanity</h2>
<div class="outline-text-2" id="text-orgc35e2cb">
<div id="outline-container-org90afa1a" class="outline-2">
<h2 id="org90afa1a">Using with Profanity</h2>
<div class="outline-text-2" id="text-org90afa1a">
<p>
The <a href="https://profanity.im">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
</p>
@ -390,9 +390,9 @@ When accessed via the user control panel the client is automatically routed thro
</div>
</div>
<div id="outline-container-orga90bf98" class="outline-2">
<h2 id="orga90bf98">Using with Jitsi</h2>
<div class="outline-text-2" id="text-orga90bf98">
<div id="outline-container-org6aeefab" class="outline-2">
<h2 id="org6aeefab">Using with Jitsi</h2>
<div class="outline-text-2" id="text-org6aeefab">
<p>
Jitsi can be downloaded from <a href="https://jitsi.org">https://jitsi.org</a>
</p>
@ -419,9 +419,9 @@ You can also <a href="https://www.youtube.com/watch?v=vgx7VSrDGjk">see this vide
</div>
</div>
<div id="outline-container-org0b60ac8" class="outline-2">
<h2 id="org0b60ac8">Using with Ubuntu</h2>
<div class="outline-text-2" id="text-org0b60ac8">
<div id="outline-container-orgefffbcb" class="outline-2">
<h2 id="orgefffbcb">Using with Ubuntu</h2>
<div class="outline-text-2" id="text-orgefffbcb">
<p>
The default XMPP client in Ubuntu is Empathy. Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
</p>
@ -440,18 +440,18 @@ Click on <b>Advanced</b> and make sure that <b>Encryption required</b> and <b>Ig
</div>
</div>
<div id="outline-container-org62a1e25" class="outline-2">
<h2 id="org62a1e25">Using Tor Messenger</h2>
<div class="outline-text-2" id="text-org62a1e25">
<div id="outline-container-org175673d" class="outline-2">
<h2 id="org175673d">Using Tor Messenger</h2>
<div class="outline-text-2" id="text-org175673d">
<p>
Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org">torproject.org</a> and the setup is pretty simple.
</p>
</div>
</div>
<div id="outline-container-org496c82f" class="outline-2">
<h2 id="org496c82f">Using with Android/Conversations</h2>
<div class="outline-text-2" id="text-org496c82f">
<div id="outline-container-org14cc22e" class="outline-2">
<h2 id="org14cc22e">Using with Android/Conversations</h2>
<div class="outline-text-2" id="text-org14cc22e">
<p>
Install <a href="https://f-droid.org/">F-Droid</a>
</p>