Articles by stpeter

Happy Encrypted Network!

Today, a large number of services on the public XMPP network permanently turned on mandatory encryption for client-to-server and server-to-server connections (there's a fine summary here).

This is the first step toward making the XMPP network more secure for all users.

Stay tuned for more updates as we work ...

Posted by stpeter on May, 19, 2014 - filed under misc

Security Notice: Uncontrolled Resource Consumption with Highly-Compressed XMPP Stanzas

The XMPP Standards Foundation has published a security notice describing an uncontrolled resource consumption vulnerability in several XMPP server implementations that support application-layer compression. Details can be found at http://xmpp.org/resources/security-notices/uncontrolled-resource-consumption-with-highly-compressed-xmpp-stanzas/.

Posted by stpeter on April, 04, 2014 - filed under misc

Third Security Test Day

Tomorrow sees the third security test day.

Security test days help XMPP operators test-run with strong encryption settings prior to the big encryption switch-over scheduled for 19 May 2014.

A large number of XMPP sites have already signed up to the ubiquitous encryption manifesto. More so, some of the participating ...

Posted by stpeter on March, 21, 2014 - filed under misc

Second Security Test Day

This Saturday (February 22, 2014), XMPP site operators are again flipping the "encrypt all traffic" switch.

This is the second of four test days kicked off by the manifesto first published last fall. The aim is to encrypt all traffic between servers and clients on the public, federated XMPP network ...

Posted by stpeter on February, 18, 2014 - filed under misc

In-Band Real-Time Text to Draft Standard

The XMPP Standards Foundation has advanced XEP-0301 (In-Band Real Time Text) from Experimental to Draft in its standards process. This technology enables "conversational text" to be exchanged instantly while it is being typed or created, which has applications in live speech transcription, systems for the deaf and hard of hearing ...

Posted by stpeter on October, 09, 2013 - filed under misc

Stanza Forwarding to Draft Standard

XEP-0297, which defines a method for forwarding XMPP stanzas from one entity to another, has been advanced to a status of Draft within the XSF's standards process.

Posted by stpeter on October, 09, 2013 - filed under misc

Server Dialback to Draft Standard

The XMPP Standards Foundation has advanced the Server Dialback protocol specification (XEP-0220) to a status of Draft. Although this protocol was originally defined in RFC 3920, it was moved to XEP-0220 in 2007 when work began on the updated XMPP RFCs, and the documentation has been continually improved since then.

Posted by stpeter on September, 28, 2013 - filed under misc

Bidirectional Server-to-Server Connections

Today the XMPP Council advanced XEP-0288 from Experimental to Draft in the XSF's standards process. This specification decreases the number of sockets necessary for server-to-server connections and also removes some of the practical barriers to connection multiplexing in the Server Dialback protocol.

Posted by stpeter on September, 26, 2013 - filed under misc

Hackfest in Berlin on July 27

The XSF will hold a developer hackfest on July 27, 2013 in Berlin, Germany. This is the Saturday before IETF 87.

Details are available at http://wiki.xmpp.org/web/Berlin_Hackfest.

Posted by stpeter on June, 11, 2013 - filed under misc

The FOSDEM Schedule Is Set

The schedule for the Jabber/XMPP devroom at FOSDEM 2013 is now final. Visit https://fosdem.org/2013/schedule/track/jabber/ for the details and http://wiki.xmpp.org/web/FOSDEM_2013 for more information about our involvement with FOSDEM 2013.