My tinfoil hat theory (that others may have had, or it may be something I read somewhere...) is that the XMPP protocol was part of what made PRISM successful, and the timing of these orgs adding XMPP is kind of aligned with when they were “online” for PRISM.

I’m pretty sure the larger orgs that were targeted could tell that the only way this information leaked easily, or was justified, was because of XMPP metadata, or some other large scale flaw.

The XMPP group also had a pretty visible security/encryption lockdown that I didn’t feel like was explained well, or maybe I just didn’t understand it :) https://github.com/stpeter/manifesto/blob/master/manifesto.t...