Conversation

Notices

1. XSF: XMPP Standards Foundation (xmpp@fosstodon.org)'s status on Friday, 27-Oct-2023 06:17:12 JST XSF: XMPP Standards Foundation

   #XSF Announcement

   Recently there was an attack via so called #man_in_the_middle attack happened to an #XMPP #server.

   To reduce the risk of such attacks in the future an early stage service called CertWatch has been published by our Community: https://certwatch.xmpp.net/

   Many thanks to Stephen P. Weber (@singpolyma)!

   Read two related blog posts:
   http://blog.jmp.chat/b/certwatch/certwatch

   https://snikket.org/blog/on-the-jabber-ru-mitm/

   #Jabber #mitm #security #vulnerability #machine_in_the_middle #chat

   • Freax likes this.
   • Gajim (gajim@fosstodon.org)'s status on Monday, 30-Oct-2023 05:32:14 JST Gajim

     in reply to

     • Debacle
     • Daniel Gultsch
     • Klaus Alexander Seistrup
     • Dino
     • Martin

     @debacle @daniel @kas @xmpp @mdosch @dino Gajim 1.8.2 will support this 👍

   • Debacle (debacle@framapiaf.org)'s status on Monday, 30-Oct-2023 05:32:16 JST Debacle

     in reply to

     • Daniel Gultsch
     • Klaus Alexander Seistrup
     • Dino
     • Gajim
     • Martin

     @daniel @kas @xmpp @mdosch

     Seems not to work with #Gajim by @gajim, but with #Dino by @dino.

   • Daniel Gultsch (daniel@gultsch.social)'s status on Monday, 30-Oct-2023 05:32:17 JST Daniel Gultsch

     in reply to

     • Klaus Alexander Seistrup

     @kas @xmpp exactly like you would open a chat with a contact. Or by clicking here: xmpp:certwatch.xmpp.net

     Conversations shows a warning that this is a domain address but 'add anyway' works fine.

   • Klaus Alexander Seistrup (kas@magnetic-ink.dk)'s status on Monday, 30-Oct-2023 05:32:19 JST Klaus Alexander Seistrup

     in reply to
     @xmpp
     
     #XMPP #CertWatch said that »[My] settings are correct and no MITM was detected.« That's great.
     
     It then continued with some #PubSub stuff and finally said »If you do not have a pubsub-capable client you can subscribe for text notifications by opening a chat with certwatch.xmpp.net and sending the message “subscribe <my xmpp server>”«.
     
     My question is now: How do I open a chat with a hostname and not a JID?
     
     My clients are #Gajim resp. #Conversations / #BlabberIM.
     
     Anyone?