News for hackers. Stuff that matters.

A comment on XMPP: The secure communication protocol that respects privacy. Parent comment

Re:XMPP: The secure communication protocol that respects pri... by rakoo on Monday January 10, 2022 @05:34AM (#29872789)
XMPP leaves a lot of metadata and user information around, so it does have a privacy issue that's probably not solvable. Whether it's a security issue is a completely different discussion though.
[ Parent | on HN ]
Re:XMPP: The secure communication protocol that respects pri... by f1refly on Monday January 10, 2022 @05:44AM (#29872869)
That's got nothing to do with the security problems OP complained about though. Are there even working solutions to those metadata problems apart from sending dummy decoy messages and purposeful delays on the server side to make correlating message relaying hard?
[ Parent | on HN ]
Re:XMPP: The secure communication protocol that respects pri... by southerntofu on Monday January 10, 2022 @06:09AM (#29873065)
The metadata leaks are more about correlating pseudonymous identities to the same accounts than network leaks (for which we employ VPN/SSH tunnels or Tor). If you'd like to know more about the threat model of XMPP: https://joinjabber.org/faqs/security/ (critique welcome)
[ Parent | on HN ]