Re: [free-software-melb] Recommendations for XMPP servers

On 21/06/13 19:22, Brian May wrote:

On 21/06/2013 6:51 PM, "Ben Finney" wrote:

...

I wasn't specific enough here: I mean “which services are good to recommend”, i.e. recommendations to give to people who aren't going to set up their own server softweare but want an existing, hosted service where they can get an XMPP account.

I use jabber.org.au

See https://jabber.org.au/ from memory.

I run my own XMPP server (ejabber), but I have people on my roster that use the DuckDuckGo XMPP servers at dukgo.com. Setup instructions here: https://dukgo.com/blog/using-pidgin-with-xmpp-jabber Information about the privacy policy in place (which appears to be one of the best) down the bottom of this post: https://dukgo.com/blog/xmpp-services-at-duckduckgo I feel that having a well thought-out privacy policy is very important, particularly for a communications service - and it's something that jabber.org.au seems to lack. There are two concerns I have with DuckDuckGo's XMPP offering however: 1. DuckDuckGo is a US company. If they aren't logging anything and you trust the encryption in place, that perhaps may not be too concerning. 2. The DuckDuckGo XMPP service uses a self-signed certificate, and no fingerprint is provided. This would seem to introduce some risk of a man in the middle attack. Due to concern 2, I find DuckDuckGo currently difficult to recommend (but I don't know anything better to suggest). Hopefully they sort it out soon. -Adam