free
/
freedombonee
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Setting hostname in gajim

This commit is contained in:
Bob Mottram 2016-12-06 11:20:02 +00:00
parent f2f72193b8
commit a4ba665017
2 changed files with 25 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/EN/app_xmpp.org
View File

@ -40,6 +40,8 @@ Open Gajim and enter your XMPP address and password.
Go to *Edit/Preferences* and select the *Advanced* tab. Under *Global Proxy* select *Tor* and the *Close* button. Then select *Edit/Plugins* and make sure that OMEMO is active (ticked), then select the *Close* button.
Go to *Edit/Accounts*, select your account then the *Connection* tab. Ensure that *Use custom hostname/port* is checked and enter your onion address there as the hostname (it can be found on the /About/ screen of the administrator control panel). Using the onion address will give you better protection against correlation attacks within the Tor network.
When you start a conversation make sure that the OMEMO box is ticked. You can also click on the keys button and trust various fingerprints. Both sides will need to do that before an encrypted chat can start.
If you wish to make backups of the OMEMO keys then they can be found within:

42
website/EN/app_xmpp.html
View File

@ -3,7 +3,7 @@
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<!-- 2016-11-12 Sat 21:12 -->
<!-- 2016-12-06 Tue 11:19 -->
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title></title>
@ -259,9 +259,9 @@ With regard to chat apps you might have read a lot of stuff about <i>end-to-end
A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
</p>
<div id="outline-container-orgfdc65c1" class="outline-2">
<h2 id="orgfdc65c1">Using with Gajim</h2>
<div class="outline-text-2" id="text-orgfdc65c1">
<div id="outline-container-org08af6ae" class="outline-2">
<h2 id="org08af6ae">Using with Gajim</h2>
<div class="outline-text-2" id="text-org08af6ae">
<p>
In mid 2016 <a href="https://gajim.org/">Gajim</a> became the first desktop XMPP client to support the <a href="https://en.wikipedia.org/wiki/OMEMO">OMEMO end-to-end security standard</a>, which is superior to the more traditional <a href="https://en.wikipedia.org/wiki/Off-the-Record_Messaging">OTR</a> since it also includes multi-user chat and the ratcheting mechanism pioneered by Open Whisper Systems. To install it:
</p>
@ -286,6 +286,10 @@ Open Gajim and enter your XMPP address and password.
Go to <b>Edit/Preferences</b> and select the <b>Advanced</b> tab. Under <b>Global Proxy</b> select <b>Tor</b> and the <b>Close</b> button. Then select <b>Edit/Plugins</b> and make sure that OMEMO is active (ticked), then select the <b>Close</b> button.
</p>
<p>
Go to <b>Edit/Accounts</b>, select your account then the <b>Connection</b> tab. Ensure that <b>Use custom hostname/port</b> is checked and enter your onion address there as the hostname (it can be found on the <i>About</i> screen of the administrator control panel). Using the onion address will give you better protection against correlation attacks within the Tor network.
</p>
<p>
When you start a conversation make sure that the OMEMO box is ticked. You can also click on the keys button and trust various fingerprints. Both sides will need to do that before an encrypted chat can start.
</p>
@ -305,9 +309,9 @@ If you wish to use OpenPGP to encrypt your messages then go to <b>Edit/Accounts<
</div>
</div>
<div id="outline-container-org90afa1a" class="outline-2">
<h2 id="org90afa1a">Using with Profanity</h2>
<div class="outline-text-2" id="text-org90afa1a">
<div id="outline-container-orgbf02634" class="outline-2">
<h2 id="orgbf02634">Using with Profanity</h2>
<div class="outline-text-2" id="text-orgbf02634">
<p>
The <a href="https://profanity.im">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
</p>
@ -390,9 +394,9 @@ When accessed via the user control panel the client is automatically routed thro
</div>
</div>
<div id="outline-container-org6aeefab" class="outline-2">
<h2 id="org6aeefab">Using with Jitsi</h2>
<div class="outline-text-2" id="text-org6aeefab">
<div id="outline-container-org0f76f13" class="outline-2">
<h2 id="org0f76f13">Using with Jitsi</h2>
<div class="outline-text-2" id="text-org0f76f13">
<p>
Jitsi can be downloaded from <a href="https://jitsi.org">https://jitsi.org</a>
</p>
@ -419,9 +423,9 @@ You can also <a href="https://www.youtube.com/watch?v=vgx7VSrDGjk">see this vide
</div>
</div>
<div id="outline-container-orgefffbcb" class="outline-2">
<h2 id="orgefffbcb">Using with Ubuntu</h2>
<div class="outline-text-2" id="text-orgefffbcb">
<div id="outline-container-org79d0ce4" class="outline-2">
<h2 id="org79d0ce4">Using with Ubuntu</h2>
<div class="outline-text-2" id="text-org79d0ce4">
<p>
The default XMPP client in Ubuntu is Empathy. Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
</p>
@ -440,18 +444,18 @@ Click on <b>Advanced</b> and make sure that <b>Encryption required</b> and <b>Ig
</div>
</div>
<div id="outline-container-org175673d" class="outline-2">
<h2 id="org175673d">Using Tor Messenger</h2>
<div class="outline-text-2" id="text-org175673d">
<div id="outline-container-org436abd8" class="outline-2">
<h2 id="org436abd8">Using Tor Messenger</h2>
<div class="outline-text-2" id="text-org436abd8">
<p>
Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org">torproject.org</a> and the setup is pretty simple.
</p>
</div>
</div>
<div id="outline-container-org14cc22e" class="outline-2">
<h2 id="org14cc22e">Using with Android/Conversations</h2>
<div class="outline-text-2" id="text-org14cc22e">
<div id="outline-container-org186f007" class="outline-2">
<h2 id="org186f007">Using with Android/Conversations</h2>
<div class="outline-text-2" id="text-org186f007">
<p>
Install <a href="https://f-droid.org/">F-Droid</a>
</p>