Posts by mellium@fosstodon.org
(DIR) Post #ALVrYXqOw9obWRy6aW by mellium@fosstodon.org
2022-07-15T10:33:02Z
1 likes, 1 repeats
The migration to @codeberg is finally complete! If you notice anything missing or broken, please let us know. Our code can now be found at https://codeberg.org/mellium/
(DIR) Post #ALtRrpegU48asRtEhc by mellium@fosstodon.org
2022-07-26T19:38:15Z
1 likes, 1 repeats
We've published our first RFC in collaboration with the IETF! It was written to allow Mellium (and now anything else using TLS 1.3) to have an authenticated session that is bound to a specific TLS session. Check it out: https://www.rfc-editor.org/info/rfc9266
(DIR) Post #ALx2nNTko303lJQsam by mellium@fosstodon.org
2022-07-28T13:16:10Z
0 likes, 1 repeats
We just ran integration tests against @prosodyim with channel binding support for TLS 1.3 using RFC 9266 for the first time and all is well! Thanks @zash for the Prosody/LuaSec patches! https://ci.codeberg.org/mellium/xmpp/build/28/20
(DIR) Post #AM3mCsX09XeSC8FFc8 by mellium@fosstodon.org
2022-07-31T19:13:14Z
0 likes, 0 repeats
The Dev Communiqué for July 2022 has been released! Major updates this month include an implementation of RFC 9266 and a new tool for finding documentation related issues: https://opencollective.com/mellium/updates/dev-communique-for-july-2022
(DIR) Post #AM4Bv8GfVHxgb2nu8u by mellium@fosstodon.org
2022-08-01T00:01:24Z
0 likes, 0 repeats
@kaip @prosodyim Let's assume, for example, that someone compromises the TLS certificate of a server you're trying to authenticate against. They MITM the connection by making a connection to the upstream server and trick you into making a connection to them. Using channel binding means that the authentication attempt won't be valid to the upstream server and the connection won't complete because their TLS session won't have the same channel binding data as yours.
(DIR) Post #AM9WByxd8tcF7FsPZ2 by mellium@fosstodon.org
2022-08-03T13:42:06Z
0 likes, 2 repeats
Just merged some integration tests against the C library libgsasl! Validation feels good.
(DIR) Post #AMeSegh2gfy13RQXRo by mellium@fosstodon.org
2022-08-18T11:58:31Z
0 likes, 1 repeats
We've just released v0.21.3! Major changes this release include support for HTTP Upload and RFC 9266! For more information, see the release announcement: https://opencollective.com/mellium/updates/new-release-mellium-im-xmpp-v0-21-3
(DIR) Post #AMt5rxAf2zh306fq3U by mellium@fosstodon.org
2022-08-25T13:23:51Z
0 likes, 2 repeats
We're putting out a call for feedback! What direction would you like to see our efforts go in the next few months? More work on the client? On the library? On some other project? What in particular would make your life easier? Any comments would be most welcome!Join the discussion at xmpp:users@mellium.chat?join or on the web at https://mellium.chat/
(DIR) Post #AMtDNznhVNEM6PA0Om by mellium@fosstodon.org
2022-08-25T14:48:05Z
0 likes, 0 repeats
@kaip I don't know anything about iOS, so I probably can't help there. It strikes me that the issue might be a lack of iOS developers that use xmpp. Maybe this is more a task for an advocacy group to try and increase adoption?
(DIR) Post #AMtDX0p74VVZsf7Wi0 by mellium@fosstodon.org
2022-08-25T14:49:43Z
0 likes, 0 repeats
@kaip WRT hosting from home: what problems do you see there? It seems like it's no more difficult than any other kind of server?
(DIR) Post #AN5Mxv5zgpDqikD75s by mellium@fosstodon.org
2022-08-31T11:31:57Z
0 likes, 2 repeats
The monthly Dev Communiqué for August 2022 has been released! Get it over on Open Collective: https://opencollective.com/mellium/updates/dev-communique-for-august-2022
(DIR) Post #AOWd1OaIMUqjwyMeQ4 by mellium@fosstodon.org
2022-10-13T13:01:07Z
0 likes, 0 repeats
Hi all, we're currently seeking a paid contributor from the EU (sorry, this requirement is part of the grant you'd be paid under) to help out with any aspect of Mellium from web development to documentation to coding! If you think you'd be a good fit, or have a proposal for what you'd like to do, reach out! Contributors can even become member-owners of Mellium Co-op (and help us decide what that actually means)!
(DIR) Post #AQ04ptXXET7jUI718a by mellium@fosstodon.org
2022-11-26T14:40:59Z
0 likes, 1 repeats
We are excited to announce that we will be implementing #OMEMO end-to-end encryption in Mellium with a grant from #NLNet and the #NGIAssure fund! #XMPP has never been better, and we hope to improve the entire ecosystem with the project. https://opencollective.com/mellium/updates/mellium-to-receive-grant-for-end-to-end-encryption
(DIR) Post #AQ1uySC5f8lA3ZRaYy by mellium@fosstodon.org
2022-11-27T12:26:58Z
1 likes, 0 repeats
@chpietsch @edendestroyer @schlauch Define "built in"? Matrix has a spec for it the same as XMPP, the only real difference is that XMPP has a *lot* of clients for every system under the sun, and many of them were around since before the e2e spec existed, so adoption isn't always there. Matrix only has a few clients in various states of development, and for the most part the vast majority of people only use Element, so yes it supports e2e more, but only because it's defacto centralized.
(DIR) Post #AQF8e0SF0p24e5cb5M by mellium@fosstodon.org
2022-12-03T21:52:01Z
0 likes, 2 repeats
We've just discovered that the sponsor that allows us to host our website and various chat rooms for free is shutting down unexpectedly. If anyone has suggestions for XMPP and/or web hosting, or if you're a company or #cooperative with the money to sponsor a small open source projects minimal infrastructure needs, we'd love to hear from you!
(DIR) Post #AQO1IvnOBj26rI9kIq by mellium@fosstodon.org
2022-12-08T03:23:49Z
1 likes, 2 repeats
Looks like the website will remain up! Alder IT (https://alderit.com/) has graciously stepped in now that #Fosshost is no more and has agreed to host our website. We really appreciate all the recommendations everyone provided.
(DIR) Post #ARnjHMq0VIOGDfd8k4 by mellium@fosstodon.org
2023-01-18T15:23:15Z
1 likes, 1 repeats
Looking at a thread where someone is complaining about #XMPP being broken. The clients they are using are terrible and out of date, however the only replies are people either saying "that's <client you tried>, not XMPP" or "Have you tried <client they already listed>?", neither of which are helpful. Please read and understand that when users have frustrations, telling them that it's not actually a problem or that they were holding it wrong is probably even more frustrating.
(DIR) Post #ARnjHOSgSyvFFujXfM by mellium@fosstodon.org
2023-01-18T15:23:58Z
0 likes, 0 repeats
That being said, I have no idea why it's so common that people try clients that haven't been updated in 10 years. I suspect it's just an SEO thing.
(DIR) Post #ASmcbgo2FmV82tkob2 by mellium@fosstodon.org
2023-02-17T21:40:17Z
0 likes, 0 repeats
@stevenroose @0@mamot.fr @blake ENOCTX
(DIR) Post #ASmmjr76oSn1sACyO0 by mellium@fosstodon.org
2023-02-17T23:33:49Z
0 likes, 0 repeats
@stevenroose @blake oh sweet, I dunno if that's it or not but good for them. I'm not sure how to check if an instance is blocked or not, just that if I try to view that user it says they've been blocked.