239 lines
19 KiB
Markdown
239 lines
19 KiB
Markdown
|
> ---
|
|||
|
|
> title: The XMPP Newsletter December 2021 & January 2022
|
|||
|
|
> author: emus
|
|||
|
|
> date: 2022-02-05
|
|||
|
|
> categories: ['Newsletter']
|
|||
|
|
> ---
|
|||
|
|
>
|
|||
|
|
> Welcome to the XMPP Newsletter covering the month of December 2021 and January 2022!
|
|||
|
|
>
|
|||
|
|
> We hope you had a great shift into the new year by now as well as are happy to have you reading the new release! We guess that this episode has caught some weight over the new year's holidays :-)
|
|||
|
|
>
|
|||
|
|
> Many projects and their efforts in the XMPP community are a result of people’s voluntary work. If you are happy with the services and software you may be using, especially throughout the current situation, please consider saying thanks or help these projects!
|
|||
|
|
>
|
|||
|
|
> [Read this Newsletter via our RSS Feed](https://xmpp.org/feeds/all.atom.xml)!
|
|||
|
|
>
|
|||
|
|
> Interested in supporting the Newsletter team? Read more at the bottom.
|
|||
|
|
>
|
|||
|
|
> Other than that — enjoy reading!
|
|||
|
|
>
|
|||
|
|
> ### Newsletter translations
|
|||
|
|
>
|
|||
|
|
> Translations of the XMPP Newsletter will be released here (with some delay):
|
|||
|
|
>
|
|||
|
|
> - The French translation appears at [jabberfr.org](https://news.jabberfr.org/category/newsletter/) and [linuxfr.org](https://linuxfr.org/tags/xmpp/public)
|
|||
|
|
> - The German translation appears at [anoxinon.de](https://anoxinon.de/blog/)
|
|||
|
|
> - The Italian translation appears at [NicFab.it](https://www.nicfab.it/)
|
|||
|
|
> - The Spanish translation appears the same way as the English orginial, simply select [Spanish in the top bar](https://xmpp.org/2022/12/ES/newsletter-dec21-jan22/)
|
|||
|
|
>
|
|||
|
|
> Many thanks to the translators and their work! This is a great help to spread the news! Please join them in their work or start over with any another language!
|
|||
|
|
>
|
|||
|
|
> ## XSF Announcements
|
|||
|
|
>
|
|||
|
|
> - The XSF is planning to participate in the [Google Summer of Code 2022 (GSoC)](https://xmpp.org/community/gsoc-2022/). If you are interested in participating as a student, mentor or as a project in general, please [add your ideas and reach out to us](https://wiki.xmpp.org/web/Google_Summer_of_Code_2022)!
|
|||
|
|
>
|
|||
|
|
> 
|
|||
|
|
>
|
|||
|
|
> - Blog and newsletter pages at [xmpp.org/blog](https://xmpp.org/blog) now support multiple languages. We are happy for volunteers to support translating!
|
|||
|
|
>
|
|||
|
|
> ## XSF fiscal hosting projects
|
|||
|
|
>
|
|||
|
|
> The XSF offers [fiscal hosting](https://xmpp.org/community/fiscalhost/) for XMPP projects now! Please apply via [Open Collective](https://opencollective.com/xmpp). For more information, see the [announcement blog post](https://xmpp.org/2021/09/the-xsf-as-a-fiscal-host/).
|
|||
|
|
>
|
|||
|
|
> - [Bifrost bridge: Offline messages exchange between Matrix and XMPP](https://opencollective.com/bifrost-mam)
|
|||
|
|
> - [Mellium Co-op](https://opencollective.com/mellium)
|
|||
|
|
>
|
|||
|
|
> ## Events
|
|||
|
|
>
|
|||
|
|
> [XMPP Office Hours](https://wiki.xmpp.org/web/XMPP_Office_Hours) - Also, checkout our new [YouTube channel](https://www.youtube.com/channel/UCf3Kq2ElJDFQhYDdjn18RuA)!
|
|||
|
|
>
|
|||
|
|
> [Berlin XMPP Meetup (remote)](https://mov.im/?node/pubsub.movim.eu/berlin-xmpp-meetup): Monthly Meeting of XMPP Enthusiasts in Berlin - always 2nd Wednesday of the month.
|
|||
|
|
>
|
|||
|
|
> ## Videos
|
|||
|
|
>
|
|||
|
|
> Thilo Molitor (developer of Monal) [held a talk](https://xmpp-meetup.in-berlin.de/talks/monal.mp4) (DE) about Monal's development.
|
|||
|
|
>
|
|||
|
|
> XMPP Office Hours: Fabian Sauter presented his [adventures in developing an XMPP Client](https://www.youtube.com/watch?v=Bceu6E7c7GM) for Windows (Universal Windows Platform (UWP)) in December.
|
|||
|
|
>
|
|||
|
|
> XMPP has been mentioned in a [German public TV](https://youtu.be/DdIwus87eLM?t=844) [DE] show in the context of data protection.
|
|||
|
|
>
|
|||
|
|
> ## Articles
|
|||
|
|
>
|
|||
|
|
> JMP.chat released two blog posts. [The first](https://blog.jmp.chat/b/2022-jabber-xmpp-from-sms) details a feature of the Soprani.ca project's Cheogram system that allows SMS users to contact (or call!) any XMPP address. [Their Newsletter](https://blog.jmp.chat/b/january-newsletter-2022) also announces a partnership with Snikket for hosting, as well as a preview of worldwide calling rates as they prepare to launch that feature soon.
|
|||
|
|
>
|
|||
|
|
> 
|
|||
|
|
>
|
|||
|
|
> There are several articles to the topic "messenger" at the German site from "[Freie Messenger](https://www.freie-messenger.de/#neuigkeiten-letzte-änderungen)" with a focus on alternatives to WhatsApp, E2EE, interoperability, security/pseudosecurity. Help is welcome, translating the articles to your native language.
|
|||
|
|
>
|
|||
|
|
> [OMEMO was finally integrated in Movim](https://mov.im/?post/pubsub.movim.eu/Movim/end-to-end-encryption-in-movim-omemo-is-finally-there-yudZPP) after 6 long years of discussions. In this article Timothée, Movim developer, explains the general OMEMO architecture, the difficulties encountered while working on the integration in Movim and how they overcame them.
|
|||
|
|
>
|
|||
|
|
> 
|
|||
|
|
>
|
|||
|
|
> As the [previously announced](https://snikket.org/blog/simply-secure-collaboration/) collaboration between Snikket and Simply Secure ended its first project, they interviewed the project's founder, Matthew Wild, about Snikket's origins and his experience managing open-source projects. Read the interview: [On Getting Things Done: A Conversation with Matthew Wild from Snikket](https://simplysecure.org/blog/on-getting-things-done-a-conversation-with-matthew-wild-from-snikket/).
|
|||
|
|
>
|
|||
|
|
> Mellium Co-op has published their [Year in Review for 2021](https://opencollective.com/mellium/updates/mellium-year-in-review-2021) and the [Dev Communiqué for December 2021](https://opencollective.com/mellium/updates/dev-communique-for-december-2021) and [January 2022](https://opencollective.com/mellium/updates/dev-communique-for-january-2022).
|
|||
|
|
>
|
|||
|
|
> MongooseIM writes about [Dynamic XMPP Domains in their solutions](https://www.erlang-solutions.com/blog/dynamic-xmpp-domains-in-mongooseim/)
|
|||
|
|
>
|
|||
|
|
> Andrew Lewman trials various messaging protocols over a congested network, and makes a [discovery about XMPP performance](https://blog.lewman.com/internet-messaging-versus-congested-network.html) in such situations.
|
|||
|
|
>
|
|||
|
|
> Ravi Dwivedi demonstrates that "freedom and privacy can be convenient too" in their short introduction to the [Quicksy Android client](https://ravidwivedi.in/posts/quicksy-app/index.html)
|
|||
|
|
>
|
|||
|
|
> The German Linux Magazin has been [testing free instant messaging clients](https://www.linux-magazin.de/ausgaben/2022/02/bitparade/) for Linux in their latest printout and, alongside other messengers, reviewed the [Gajim desktop client](https://gajim.org/).
|
|||
|
|
>
|
|||
|
|
> An analysis of the dangers of misconfigured XMPP servers in this piece about [XMPP server security](https://bishopfox.com/blog/xmpp-underappreciated-attack-surface) by Bishop Fox.
|
|||
|
|
>
|
|||
|
|
> vanitasvitae published an [article](https://blog.jabberhead.tk/2021/12/30/pgpainless-1-0-0-released/) celebrating the `1.0.0` release of [PGPainless](https://pgpainless.org/). PGPainless is a Java library that aims to make using OpenPGP as easy as possible. The project was started in 2018 as a by-product of a Google Summer of Code project of the XMPP Standards Foundation!
|
|||
|
|
>
|
|||
|
|
> ## Software news
|
|||
|
|
>
|
|||
|
|
> ### Clients and applications
|
|||
|
|
>
|
|||
|
|
> [Gajim development news](https://gajim.org/post/2022-01-22-development-news-december-january/): Work on Gajim `1.4` is making big steps forward! After nine months of developing Gajim’s new main window, the code was finally ready to be merged into the master branch. This enables automatic builds of nightly versions for Linux and Windows.
|
|||
|
|
>
|
|||
|
|
> [monocles chat](https://f-droid.org/de/packages/de.monocles.chat/) (a fork of Conversations and Blabber.im) will get OTR support in the next release. The client also only allows connections to XMPP servers with up to date SSL configurations and does not offer fallback SSL connections to avoid data leaks. Nevertheless it is compatible with every current XMPP account.
|
|||
|
|
>
|
|||
|
|
> [Libervia `0.8` "La Cecília"](https://www.goffi.org/b/libervia-v0-8-la-cecilia-BdQ4) (formerly known as "Salut à Toi") has been released with a complete OMEMO encrytion finalization for group chats, a new default theme, an easy to use invitation system, a non-standard (XMPP) list feature, photo albums and many technical changes.
|
|||
|
|
>
|
|||
|
|
> A new stable release of [SiskinIM `7.0.1` has been published](https://github.com/tigase/siskin-im/releases/tag/7.0.1) which includes sending unencrypted messages in single chats with default encryption for OMEMO and presenting automatic file download size limit.
|
|||
|
|
>
|
|||
|
|
> ## Servers
|
|||
|
|
>
|
|||
|
|
> [Openfire `4.7.0`](https://discourse.igniterealtime.org/t/openfire-4-7-0-has-been-released/91268) has been released (having their [Beta released](https://discourse.igniterealtime.org/t/openfire-4-7-0-beta-hazelcast-plugin-2-6-0-releases/91087) before). This release is the first non-patch release in more than a year, which brings a healthy amount of new features, as well as bug fixes. Highlights of this release include extensively improved clustering support, particularly around Multi-User Chat functionality, which should benefit high-volume environments. Previously also [Openfire `4.5.5`](https://discourse.igniterealtime.org/t/openfire-4-6-6-and-4-5-5-releases-log4j-only-changes/91139), [Openfire `4.6.5`](https://discourse.igniterealtime.org/t/openfire-4-6-5-released/91108) and [Openfire `4.6.6`](https://discourse.igniterealtime.org/t/openfire-4-6-6-and-4-5-5-releases-log4j-only-changes/91139) have been released.
|
|||
|
|
>
|
|||
|
|
> [Prosody `0.11.13`](https://blog.prosody.im/prosody-0.11.13-released/) has been released. Since December, new Prosody releases brought some fixes to PEP to control memory usage, a security fix that addresses a denial-of-service vulnerability in Prosody’s mod_websocket, and a fix for a memory leak. Previously [Prosody `0.11.11`](https://blog.prosody.im/prosody-0.11.11-released/) and [Prosody `0.11.12`](https://blog.prosody.im/prosody-0.11.12-released/) were released, too.
|
|||
|
|
>
|
|||
|
|
> [ejabberd `21.12`](https://www.process-one.net/blog/ejabberd-21-12/) has been released. The new ejabberd 21.12 release comes after five months of work, contains more than one hundred changes, many of them are major improvements or features, and several bug fixes: PubSub improvements, new mod_conversejs, and support for MUC Hats ([XEP-0317](https://xmpp.org/extensions/xep-0317.html)).
|
|||
|
|
>
|
|||
|
|
> [Jackal](https://github.com/ortuman/jackal), an XMPP server written in Go, had [version `0.56.0`](https://github.com/ortuman/jackal/releases) released.
|
|||
|
|
>
|
|||
|
|
> Snikket announced their [January 2022 server release](https://snikket.org/blog/jan-2022-server-release/), this includes a [security fix](https://snikket.org/blog/snikket-jan-2021-security-release/) announced earlier in January. The primary new feature in this release is account import/export functionality, the final part of the [XMPP account portability project](https://docs.modernxmpp.org/projects/portability/) funded by NGI DAPSI.
|
|||
|
|
>
|
|||
|
|
> 
|
|||
|
|
>
|
|||
|
|
> ## Libraries
|
|||
|
|
>
|
|||
|
|
> A [new XMPP component](https://gitlab.com/navlost.eu/xmpp/components/webhooks) has been published and could use some feedback. The component implements a [webhook](https://en.wikipedia.org/wiki/Webhook) transport that lets users (the person hosting the component and anyone they choose to allow) create HTTP endpoints to receive events on and translate those to XMPP messages. Webhook payloads are processed by middleware and the XMPP notifications are template-based and written in [EJS](https://ejs.co/ "Embedded JavaScript templating"). It currently comes with GitLab and plain Git integrations as well as a crude and untested Slack middleware, but it also understands plain text and PNG, JPEG and PDF content, which is sent to subscribers as attachments via [HTTP File Upload (XEP-0363)](https://xmpp.org/extensions/xep-0363.html). Find the [main repository](https://gitlab.com/navlost.eu/xmpp/components/webhooks) (no production quality yet) and there is also a [demo server](https://gitlab.com/navlost.eu/xmpp/components/webhooks/-/blob/devel/README.md#demo-server) available for casual testing.
|
|||
|
|
>
|
|||
|
|
> ## Extensions and specifications
|
|||
|
|
>
|
|||
|
|
> Developers and other standards experts from around the world collaborate on these extensions, developing new specifications for emerging practices, and refining existing ways of doing things. Proposed by anybody, the particularly successful ones end up as Final or Active - depending on their type - while others are carefully archived as Deferred. This life cycle is described in [XEP-0001](https://xmpp.org/extensions/xep-0001.html), which contains the formal and canonical definitions for the types, states, and processes. [Read more about the standards process](https://xmpp.org/about/standards-process.html). Communication around Standards and Extensions happens in the [Standards Mailing List](https://mail.jabber.org/mailman/listinfo/standards) ([online archive](https://mail.jabber.org/pipermail/standards/)).
|
|||
|
|
>
|
|||
|
|
> ### Proposed
|
|||
|
|
>
|
|||
|
|
> The XEP development process starts by writing up an idea and submitting it to the XMPP Editor. Within two weeks, the Council decides whether to accept this proposal as an Experimental XEP.
|
|||
|
|
>
|
|||
|
|
> - [Compatibility Fallbacks](https://xmpp.org/extensions/inbox/compatibility-fallback.html)
|
|||
|
|
> - This document defines a way to indicate that a specific part of the body only serves as fallback and which specification the fallback is for.
|
|||
|
|
>
|
|||
|
|
> - [Call Invites](https://xmpp.org/extensions/inbox/call-invites.html)
|
|||
|
|
> - This document defines how to invite someone to a call and how to respond to the invite.
|
|||
|
|
>
|
|||
|
|
> - [PubSub Namespaces](https://xmpp.org/extensions/inbox/pubsub-ns.html)
|
|||
|
|
> - This extension defines a new PubSub node attribute to specify the type of payload.
|
|||
|
|
>
|
|||
|
|
> - [Message Replies](https://xmpp.org/extensions/inbox/replies.html)
|
|||
|
|
> - This document defines a way to indicate that a message is a reply to a previous message.
|
|||
|
|
>
|
|||
|
|
> ### New
|
|||
|
|
>
|
|||
|
|
> - No new XEPs this month.
|
|||
|
|
>
|
|||
|
|
> ### Deferred
|
|||
|
|
>
|
|||
|
|
> If an experimental XEP is not updated for more than twelve months, it will be moved off Experimental to Deferred. If there is another update, it will put the XEP back onto Experimental.
|
|||
|
|
>
|
|||
|
|
> - No XEPs deferred this month.
|
|||
|
|
>
|
|||
|
|
> ### Updated
|
|||
|
|
>
|
|||
|
|
> - Version `1.1.0` of [XEP-0363](https://xmpp.org/extensions/xep-0363.html) (HTTP File Upload)
|
|||
|
|
> - Filename size in bytes.
|
|||
|
|
> - Headers MUST be included in the PUT request.
|
|||
|
|
> - Headers considered opaque.
|
|||
|
|
> - Servers may want to sign headers, in security implications.
|
|||
|
|
> - Allow header case insensitivity, multiple times the same header, and preserve the order in the HTTP request. (egp, mb)
|
|||
|
|
>
|
|||
|
|
> - Version `0.4.0` of [XEP-0353](https://xmpp.org/extensions/xep-0353.html) (Jingle Message Initiation)
|
|||
|
|
> - Rework whole spec, namespace bump
|
|||
|
|
> - Add new <finish/> message
|
|||
|
|
> - Add dependency on XEP-0280, XEP-0313 and XEP-0334
|
|||
|
|
> - Add <reason/> to some messages (tm)
|
|||
|
|
>
|
|||
|
|
> - Version `1.1.0` of [XEP-0459](https://xmpp.org/extensions/xep-0459.html) (XMPP Compliance Suites 2022)
|
|||
|
|
> - Replace deprecated XEP-0411 with XEP-0402 in Advanced Group Chat (egp)
|
|||
|
|
>
|
|||
|
|
> - Version `0.4.0` of [XEP-0380](https://xmpp.org/extensions/xep-0380.html) (Explicit Message Encryption)
|
|||
|
|
> - Add new OMEMO namespaces: 'urn:xmpp:omemo:1' for OMEMO versions since `0.4.0`, and 'urn:xmpp:omemo:2' for OMEMO versions since `0.8.0` (melvo)
|
|||
|
|
>
|
|||
|
|
> ### Last Call
|
|||
|
|
>
|
|||
|
|
> Last calls are issued once everyone seems satisfied with the current XEP status. After the Council decides whether the XEP seems ready, the XMPP Editor issues a Last Call for comments. The feedback gathered during the Last Call help improving the XEP before returning it to the Council for advancement to Draft.
|
|||
|
|
>
|
|||
|
|
> - Last Call for comments on [XEP-0424](https://xmpp.org/extensions/xep-0424.html) (Message Retraction)
|
|||
|
|
> - Last Call for comments on [XEP-0425](https://xmpp.org/extensions/xep-0425.html) (Message Moderation)
|
|||
|
|
>
|
|||
|
|
> ### Stable (formerly known as Draft)
|
|||
|
|
>
|
|||
|
|
> Info: The XSF has decided to rename 'Draft' to 'Stable'. [Read more about it here.](https://github.com/xsf/xeps/pull/1100)
|
|||
|
|
>
|
|||
|
|
> - No XEPs advanced to Stable this month.
|
|||
|
|
>
|
|||
|
|
> ### Deprecated
|
|||
|
|
>
|
|||
|
|
> - [XEP-0256](https://xmpp.org/extensions/xep-0256.html) (Last Activity in Presence)
|
|||
|
|
>
|
|||
|
|
> ### Obsoleted
|
|||
|
|
>
|
|||
|
|
> - [XEP-0443](https://xmpp.org/extensions/xep-0443.html) (XMPP Compliance Suites 2021)
|
|||
|
|
>
|
|||
|
|
> ### Call for Experience
|
|||
|
|
>
|
|||
|
|
> A Call For Experience - like a Last Call, is an explicit call for comments, but in this case it's mostly directed at people who've implemented, and ideally deployed, the specification. The Council then votes to move it to Final.
|
|||
|
|
>
|
|||
|
|
> - No Call for Experience this month.
|
|||
|
|
>
|
|||
|
|
> ## Thanks all!
|
|||
|
|
>
|
|||
|
|
> This XMPP Newsletter is produced collaboratively by the XMPP community.
|
|||
|
|
>
|
|||
|
|
> Therefore many thanks to Adrien Bourmault (neox), Anoxinon e.V., arne, emus, Goffi, IM, Licaon_Kter, MattJ, mdosch, NicFab, Sam Whited, TheCoffeMaker, vanitasvitae, wurstsalat3000 for their support and help in creation, review and translation!
|
|||
|
|
>
|
|||
|
|
> Many thanks to all contributors and their continuous support!
|
|||
|
|
>
|
|||
|
|
> ## Spread the news!
|
|||
|
|
>
|
|||
|
|
> Please share the news via other networks:
|
|||
|
|
>
|
|||
|
|
> * [Mastodon](https://fosstodon.org/@xmpp/)
|
|||
|
|
> * [YouTube](https://www.youtube.com/channel/UCf3Kq2ElJDFQhYDdjn18RuA)
|
|||
|
|
> * [Twitter](https://twitter.com/xmpp)
|
|||
|
|
> * [Reddit](https://www.reddit.com/r/xmpp/)
|
|||
|
|
> * [LinkedIn](https://www.linkedin.com/company/xmpp-standards-foundation/)
|
|||
|
|
>
|
|||
|
|
> Find and place job offers and professional consultants in the [XMPP job board](https://xmpp.work/).
|
|||
|
|
>
|
|||
|
|
> {{< newsletter-subscribe >}}
|
|||
|
|
>
|
|||
|
|
> Also check out our [RSS Feed](https://xmpp.org/feeds/all.atom.xml)!
|
|||
|
|
>
|
|||
|
|
> ## Help us to build the newsletter
|
|||
|
|
>
|
|||
|
|
> We started drafting in this [simple pad](https://yopad.eu/p/xmpp-newsletter-365days) in parallel to our efforts in the [XSF Github repository](https://github.com/xsf/xmpp.org/milestone/3). We are always happy to welcome contributors. Do not hesitate to join the discussion in our [Comm-Team group chat (MUC)](xmpp:commteam@muc.xmpp.org?join) and thereby help us sustain this as a community effort. We really need more support!
|
|||
|
|
>
|
|||
|
|
> You have a project and write about it? Please consider sharing your news or events here, and promote it to a large audience!
|
|||
|
|
> And even if you can only spend a few minutes of support, these would already be helpful!
|
|||
|
|
>
|
|||
|
|
> Tasks we do on a regular basis are for example:
|
|||
|
|
>
|
|||
|
|
> - Aggregation of news in the XMPP universe
|
|||
|
|
> - Short formulation of news and events
|
|||
|
|
> - Summary of the monthly communication on extensions (XEP)
|
|||
|
|
> - Review of the newsletter draft
|
|||
|
|
> - Preparation for media images
|
|||
|
|
> - Translations: especially German, French, Italian and Spanish
|
|||
|
|
>
|
|||
|
|
> ## License
|
|||
|
|
>
|
|||
|
|
> This newsletter is published under [CC BY-SA license](https://creativecommons.org/licenses/by-sa/4.0/).
|
|||
|
|
>
|