Bob Mottram 8 yıl önce
ebeveyn
işleme
2c2f96fc14
2 değiştirilmiş dosya ile 21 ekleme ve 21 silme
  1. 1
    1
      doc/EN/app_xmpp.org
  2. 20
    20
      website/EN/app_xmpp.html

+ 1
- 1
doc/EN/app_xmpp.org Dosyayı Görüntüle

16
 </center>
16
 </center>
17
 #+END_EXPORT
17
 #+END_EXPORT
18
 
18
 
19
-Most people know XMPP as "/Jabber/" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as if is on Freedombone, can provide the best chat messaging security currently available.
19
+Most people know XMPP as "/Jabber/" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as it is on Freedombone, can provide the best chat messaging security currently available.
20
 
20
 
21
 With regard to chat apps you might have read a lot of stuff about /end-to-end security/. That's important, but to also protect the metadata of who sends messages to who the data needs to be onion routed (wrapped in multiple layers of routing encryption), and that's something which most popular chat apps don't provide. Also beware of chat apps which fundamentally rely upon Google's infrastructure. You can be sure that they extensively data mine everything and will be able to reconstruct your social graph if that's at all technically feasible, then pass that to whatever governments they're friendly with or trying to lobby.
21
 With regard to chat apps you might have read a lot of stuff about /end-to-end security/. That's important, but to also protect the metadata of who sends messages to who the data needs to be onion routed (wrapped in multiple layers of routing encryption), and that's something which most popular chat apps don't provide. Also beware of chat apps which fundamentally rely upon Google's infrastructure. You can be sure that they extensively data mine everything and will be able to reconstruct your social graph if that's at all technically feasible, then pass that to whatever governments they're friendly with or trying to lobby.
22
 
22
 

+ 20
- 20
website/EN/app_xmpp.html Dosyayı Görüntüle

3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5
 <head>
5
 <head>
6
-<!-- 2016-11-12 Sat 21:07 -->
6
+<!-- 2016-11-12 Sat 21:12 -->
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9
 <title></title>
9
 <title></title>
248
 </center>
248
 </center>
249
 
249
 
250
 <p>
250
 <p>
251
-Most people know XMPP as "<i>Jabber</i>" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as if is on Freedombone, can provide the best chat messaging security currently available.
251
+Most people know XMPP as "<i>Jabber</i>" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as it is on Freedombone, can provide the best chat messaging security currently available.
252
 </p>
252
 </p>
253
 
253
 
254
 <p>
254
 <p>
259
 A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
259
 A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
260
 </p>
260
 </p>
261
 
261
 
262
-<div id="outline-container-orgfc8b0bf" class="outline-2">
263
-<h2 id="orgfc8b0bf">Using with Gajim</h2>
264
-<div class="outline-text-2" id="text-orgfc8b0bf">
262
+<div id="outline-container-orgfdc65c1" class="outline-2">
263
+<h2 id="orgfdc65c1">Using with Gajim</h2>
264
+<div class="outline-text-2" id="text-orgfdc65c1">
265
 <p>
265
 <p>
266
 In mid 2016 <a href="https://gajim.org/">Gajim</a> became the first desktop XMPP client to support the <a href="https://en.wikipedia.org/wiki/OMEMO">OMEMO end-to-end security standard</a>, which is superior to the more traditional <a href="https://en.wikipedia.org/wiki/Off-the-Record_Messaging">OTR</a> since it also includes multi-user chat and the ratcheting mechanism pioneered by Open Whisper Systems. To install it:
266
 In mid 2016 <a href="https://gajim.org/">Gajim</a> became the first desktop XMPP client to support the <a href="https://en.wikipedia.org/wiki/OMEMO">OMEMO end-to-end security standard</a>, which is superior to the more traditional <a href="https://en.wikipedia.org/wiki/Off-the-Record_Messaging">OTR</a> since it also includes multi-user chat and the ratcheting mechanism pioneered by Open Whisper Systems. To install it:
267
 </p>
267
 </p>
305
 </div>
305
 </div>
306
 </div>
306
 </div>
307
 
307
 
308
-<div id="outline-container-orgc35e2cb" class="outline-2">
309
-<h2 id="orgc35e2cb">Using with Profanity</h2>
310
-<div class="outline-text-2" id="text-orgc35e2cb">
308
+<div id="outline-container-org90afa1a" class="outline-2">
309
+<h2 id="org90afa1a">Using with Profanity</h2>
310
+<div class="outline-text-2" id="text-org90afa1a">
311
 <p>
311
 <p>
312
 The <a href="https://profanity.im">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
312
 The <a href="https://profanity.im">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
313
 </p>
313
 </p>
390
 </div>
390
 </div>
391
 </div>
391
 </div>
392
 
392
 
393
-<div id="outline-container-orga90bf98" class="outline-2">
394
-<h2 id="orga90bf98">Using with Jitsi</h2>
395
-<div class="outline-text-2" id="text-orga90bf98">
393
+<div id="outline-container-org6aeefab" class="outline-2">
394
+<h2 id="org6aeefab">Using with Jitsi</h2>
395
+<div class="outline-text-2" id="text-org6aeefab">
396
 <p>
396
 <p>
397
 Jitsi can be downloaded from <a href="https://jitsi.org">https://jitsi.org</a>
397
 Jitsi can be downloaded from <a href="https://jitsi.org">https://jitsi.org</a>
398
 </p>
398
 </p>
419
 </div>
419
 </div>
420
 </div>
420
 </div>
421
 
421
 
422
-<div id="outline-container-org0b60ac8" class="outline-2">
423
-<h2 id="org0b60ac8">Using with Ubuntu</h2>
424
-<div class="outline-text-2" id="text-org0b60ac8">
422
+<div id="outline-container-orgefffbcb" class="outline-2">
423
+<h2 id="orgefffbcb">Using with Ubuntu</h2>
424
+<div class="outline-text-2" id="text-orgefffbcb">
425
 <p>
425
 <p>
426
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
426
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
427
 </p>
427
 </p>
440
 </div>
440
 </div>
441
 </div>
441
 </div>
442
 
442
 
443
-<div id="outline-container-org62a1e25" class="outline-2">
444
-<h2 id="org62a1e25">Using Tor Messenger</h2>
445
-<div class="outline-text-2" id="text-org62a1e25">
443
+<div id="outline-container-org175673d" class="outline-2">
444
+<h2 id="org175673d">Using Tor Messenger</h2>
445
+<div class="outline-text-2" id="text-org175673d">
446
 <p>
446
 <p>
447
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org">torproject.org</a> and the setup is pretty simple.
447
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org">torproject.org</a> and the setup is pretty simple.
448
 </p>
448
 </p>
449
 </div>
449
 </div>
450
 </div>
450
 </div>
451
 
451
 
452
-<div id="outline-container-org496c82f" class="outline-2">
453
-<h2 id="org496c82f">Using with Android/Conversations</h2>
454
-<div class="outline-text-2" id="text-org496c82f">
452
+<div id="outline-container-org14cc22e" class="outline-2">
453
+<h2 id="org14cc22e">Using with Android/Conversations</h2>
454
+<div class="outline-text-2" id="text-org14cc22e">
455
 <p>
455
 <p>
456
 Install <a href="https://f-droid.org/">F-Droid</a>
456
 Install <a href="https://f-droid.org/">F-Droid</a>
457
 </p>
457
 </p>