On the state of SASL in XMPP

SASL (Simple Authentication and Security Layer) as used in XMPP is broken. In this blog post I鈥檒l try to explain why and propose some fixes. Update (2023-04-21): Since I originally wrote this blog post, I鈥檝e had the ability to discuss several of my ideas with Dave (the original author of XEP-0388 dubbed SASL2), MattJ (one of the authors of the prosody xmpp server) and others. Most, if not all, of my issues are now addressed in a bunch of updates to existing XEPs as well as new XEPs: ...

06.10.2022 路 17 min 路 Thilo Molitor RSS

NLNet Funding

We are pleased to announce that we got funding by the EU鈥檚 NGI Assure via the NLnet Foundation to work on some important features in Monal. In short this consists of the following tasks (in no special order). 1. Implement more privacy-friendly push server The current push appserver (https://github.com/tmolitor-stud-tu/mod_push_appserver) saves more data than strictly needed to perform its task, let鈥檚 change that. On top of that, a possible HA-setup and load balancing should be strived for. ...

11.09.2022 路 4 min 路 Monal RSS

Monal IM - project moved

We recently started to migrate the App from Anu Pokharel鈥榮 Apple account to Thilo Molitor鈥榮 Apple account. As part of this transition we also deployed some new push servers to not let an old retired developer pay for the infrastructure needed for Monal. Coming along with this transition from the old developer team to the new one is our new clean website at https://monal-im.org/. From now on, the old blog at https://monal.im/ will not be used for Monal anymore. ...

10.09.2022 路 1 min 路 Monal RSS

Insights Into Monal Development

TLDR: Info: Monal will stop support for iOS 12, iOS 13 and macOS Catalina! We are searching for a SwiftUI developer. We need a new simplified website. With better continuous funding, our push servers will move from the US to Europe. We have a new support mail: info@monal-im.org Two years ago we decided to rewrite the Monal app almost entirely and improve it gradually in the process, instead of creating another XMPP Client for iOS and macOS. We successfully managed to transform Monal from an app that had flaws and issues with many functions to a level that promotes a user-friendly experience with working features such as push notification, group chat, and partially end-to-end encryption support (OMEMO). If you are selecting an XMPP client for Apple systems we think that Monal is a great choice nowadays. We have been investing more than a thousand hours and worked hard to overcome all the flaws, the legacy app had. We invite you to give the recent beta a try! ...

07.03.2022 路 6 min 路 Monal RSS