Bob Mottram 8 年之前
父節點
當前提交
2c2f96fc14
共有 2 個檔案被更改,包括 21 行新增21 行删除
  1. 1
    1
      doc/EN/app_xmpp.org
  2. 20
    20
      website/EN/app_xmpp.html

+ 1
- 1
doc/EN/app_xmpp.org 查看文件

16
 </center>
16
 </center>
17
 #+END_EXPORT
17
 #+END_EXPORT
18
 
18
 
19
-Most people know XMPP as "/Jabber/" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as if is on Freedombone, can provide the best chat messaging security currently available.
19
+Most people know XMPP as "/Jabber/" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as it is on Freedombone, can provide the best chat messaging security currently available.
20
 
20
 
21
 With regard to chat apps you might have read a lot of stuff about /end-to-end security/. That's important, but to also protect the metadata of who sends messages to who the data needs to be onion routed (wrapped in multiple layers of routing encryption), and that's something which most popular chat apps don't provide. Also beware of chat apps which fundamentally rely upon Google's infrastructure. You can be sure that they extensively data mine everything and will be able to reconstruct your social graph if that's at all technically feasible, then pass that to whatever governments they're friendly with or trying to lobby.
21
 With regard to chat apps you might have read a lot of stuff about /end-to-end security/. That's important, but to also protect the metadata of who sends messages to who the data needs to be onion routed (wrapped in multiple layers of routing encryption), and that's something which most popular chat apps don't provide. Also beware of chat apps which fundamentally rely upon Google's infrastructure. You can be sure that they extensively data mine everything and will be able to reconstruct your social graph if that's at all technically feasible, then pass that to whatever governments they're friendly with or trying to lobby.
22
 
22
 

+ 20
- 20
website/EN/app_xmpp.html 查看文件

3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5
 <head>
5
 <head>
6
-<!-- 2016-11-12 Sat 21:07 -->
6
+<!-- 2016-11-12 Sat 21:12 -->
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9
 <title></title>
9
 <title></title>
248
 </center>
248
 </center>
249
 
249
 
250
 <p>
250
 <p>
251
-Most people know XMPP as "<i>Jabber</i>" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as if is on Freedombone, can provide the best chat messaging security currently available.
251
+Most people know XMPP as "<i>Jabber</i>" and it's sometimes regarded and an old protocol once used by Google and Facebook but which is no longer relevant. However, it still works and if appropriately configured, as it is on Freedombone, can provide the best chat messaging security currently available.
252
 </p>
252
 </p>
253
 
253
 
254
 <p>
254
 <p>
259
 A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
259
 A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
260
 </p>
260
 </p>
261
 
261
 
262
-<div id="outline-container-orgfc8b0bf" class="outline-2">
263
-<h2 id="orgfc8b0bf">Using with Gajim</h2>
264
-<div class="outline-text-2" id="text-orgfc8b0bf">
262
+<div id="outline-container-orgfdc65c1" class="outline-2">
263
+<h2 id="orgfdc65c1">Using with Gajim</h2>
264
+<div class="outline-text-2" id="text-orgfdc65c1">
265
 <p>
265
 <p>
266
 In mid 2016 <a href="https://gajim.org/">Gajim</a> became the first desktop XMPP client to support the <a href="https://en.wikipedia.org/wiki/OMEMO">OMEMO end-to-end security standard</a>, which is superior to the more traditional <a href="https://en.wikipedia.org/wiki/Off-the-Record_Messaging">OTR</a> since it also includes multi-user chat and the ratcheting mechanism pioneered by Open Whisper Systems. To install it:
266
 In mid 2016 <a href="https://gajim.org/">Gajim</a> became the first desktop XMPP client to support the <a href="https://en.wikipedia.org/wiki/OMEMO">OMEMO end-to-end security standard</a>, which is superior to the more traditional <a href="https://en.wikipedia.org/wiki/Off-the-Record_Messaging">OTR</a> since it also includes multi-user chat and the ratcheting mechanism pioneered by Open Whisper Systems. To install it:
267
 </p>
267
 </p>
305
 </div>
305
 </div>
306
 </div>
306
 </div>
307
 
307
 
308
-<div id="outline-container-orgc35e2cb" class="outline-2">
309
-<h2 id="orgc35e2cb">Using with Profanity</h2>
310
-<div class="outline-text-2" id="text-orgc35e2cb">
308
+<div id="outline-container-org90afa1a" class="outline-2">
309
+<h2 id="org90afa1a">Using with Profanity</h2>
310
+<div class="outline-text-2" id="text-org90afa1a">
311
 <p>
311
 <p>
312
 The <a href="https://profanity.im">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
312
 The <a href="https://profanity.im">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
313
 </p>
313
 </p>
390
 </div>
390
 </div>
391
 </div>
391
 </div>
392
 
392
 
393
-<div id="outline-container-orga90bf98" class="outline-2">
394
-<h2 id="orga90bf98">Using with Jitsi</h2>
395
-<div class="outline-text-2" id="text-orga90bf98">
393
+<div id="outline-container-org6aeefab" class="outline-2">
394
+<h2 id="org6aeefab">Using with Jitsi</h2>
395
+<div class="outline-text-2" id="text-org6aeefab">
396
 <p>
396
 <p>
397
 Jitsi can be downloaded from <a href="https://jitsi.org">https://jitsi.org</a>
397
 Jitsi can be downloaded from <a href="https://jitsi.org">https://jitsi.org</a>
398
 </p>
398
 </p>
419
 </div>
419
 </div>
420
 </div>
420
 </div>
421
 
421
 
422
-<div id="outline-container-org0b60ac8" class="outline-2">
423
-<h2 id="org0b60ac8">Using with Ubuntu</h2>
424
-<div class="outline-text-2" id="text-org0b60ac8">
422
+<div id="outline-container-orgefffbcb" class="outline-2">
423
+<h2 id="orgefffbcb">Using with Ubuntu</h2>
424
+<div class="outline-text-2" id="text-orgefffbcb">
425
 <p>
425
 <p>
426
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
426
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
427
 </p>
427
 </p>
440
 </div>
440
 </div>
441
 </div>
441
 </div>
442
 
442
 
443
-<div id="outline-container-org62a1e25" class="outline-2">
444
-<h2 id="org62a1e25">Using Tor Messenger</h2>
445
-<div class="outline-text-2" id="text-org62a1e25">
443
+<div id="outline-container-org175673d" class="outline-2">
444
+<h2 id="org175673d">Using Tor Messenger</h2>
445
+<div class="outline-text-2" id="text-org175673d">
446
 <p>
446
 <p>
447
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org">torproject.org</a> and the setup is pretty simple.
447
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org">torproject.org</a> and the setup is pretty simple.
448
 </p>
448
 </p>
449
 </div>
449
 </div>
450
 </div>
450
 </div>
451
 
451
 
452
-<div id="outline-container-org496c82f" class="outline-2">
453
-<h2 id="org496c82f">Using with Android/Conversations</h2>
454
-<div class="outline-text-2" id="text-org496c82f">
452
+<div id="outline-container-org14cc22e" class="outline-2">
453
+<h2 id="org14cc22e">Using with Android/Conversations</h2>
454
+<div class="outline-text-2" id="text-org14cc22e">
455
 <p>
455
 <p>
456
 Install <a href="https://f-droid.org/">F-Droid</a>
456
 Install <a href="https://f-droid.org/">F-Droid</a>
457
 </p>
457
 </p>