manifesto VS onionmx

> When you are establishing a standard that clients and servers will advertise that they adhere to, don't leave technical decisions to the end-user by default.

On principle I agree, but ironically the exact scenario you suggest was the single biggest event that "killed" XMPP as we used to know it. In late 2013 there was an XMPP community manifesto calling for mandatory TLS (even STARTTLS) for XMPP server-to-server communication by a drop-dead date in early 2014: https://github.com/stpeter/manifesto/blob/master/manifesto.t...

"The schedule we agree to is:

- January 4, 2014: first test day requiring encryption

- February 22, 2014: second test day

- March 22, 2014: third test day

- April 19, 2014: fourth test day

- May 19, 2014: permanent upgrade to encrypted network, coinciding

$sender_nickname = 'John Dow';         if (isset($_POST['login']) && $_POST['login'] != '') bash: syntax error near unexpected token isset' $                 $sender_nickname = $_POST['login'];                 : command not found $   No command   found, did you mean: Command ab in package apache2 Command at in package at from the unstable-repo repository Command bc in package bc Command ar in package binutils Command cc in package clang Command [ in package coreutils Command lp in package cups from the unstable-repo repository Command sh in package dash Command dx in package dx Command ed in package ed Command ef in package electric-fence Command fd in package fd Command dl in package gatling Command gh in package gh Command gs in package ghostscript Command go in package golang Command gm in package graphicsmagick Command gc in package graphviz Command i3 in package i3 from the x11-repo repository Command iw in package iw from the root-repo repository Command jo in package jo Command jq in package jq Command k in package kona Command lf in package lf Command m4 in package m4 Command mc in package mc Command mg in package mg Command ts in package moreutils Command lz in package mtools Command mu in package mu Command mr in package myrepos Command ne in package ne Command nc in package netcat Command nu in package nushell Command o in package o Command o in package o-editor Command 7z in package p7zip Command ps in package procps Command pv in package pv Command r2 in package radare2 Command ci in package rcs Command rc in package rcshell Command rg in package ripgrep Command ri in package ruby-ri Command sv in package runit Command sc in package sc Command ag in package silversearcher-ag Command sl in package sl Command st in package st from the x11-repo repository Command sr in package surfraw from the unstable-repo repository Command ts in package task-spooler Command am in package termux-am Command df in package termux-tools Command ht in package texlive-bin Command sn in package tin-summer Command tf in package tinyfugue Command ul in package util-linux Command cu in package uucp Command vi in package vim Command ex in package vim-gtk from the x11-repo repository Command vi in package vim-python Command vt in package virustotal-cli Command v in package vlang from the unstable-repo repository Command wg in package wireguard-tools Command xz in package xz-utils Command z3 in package z3 $         $sender_email = '[email protected]';         : command not found $         if (isset($_POST['email']) && $_POST['email'] != '') bash: syntax error near unexpected tokenisset' $                 $sender_email = $_POST['email'];                 : command not found $   No command   found, did you mean: Command ab in package apache2 Command at in package at from the unstable-repo repository Command bc in package bc Command ar in package binutils Command cc in package clang Command [ in package coreutils Command lp in package cups from the unstable-repo repository Command sh in package dash Command dx in package dx Command ed in package ed Command ef in package electric-fence Command fd in package fd Command dl in package gatling Command gh in package gh Command gs in package ghostscript Command go in package golang Command gm in package graphicsmagick Command gc in package graphviz Command i3 in package i3 from the x11-repo repository Command iw in package iw from the root-repo repository Command jo in package jo Command jq in package jq Command k in package kona Command lf in package lf Command m4 in package m4 Command mc in package mc Command mg in package mg Command ts in package moreutils Command lz in package mtools Command mu in package mu Command mr in package myrepos Command ne in package ne Command nc in package netcat Command nu in package nushell Command o in package o Command o in package o-editor Command 7z in package p7zip Command ps in package procps Command pv in package pv Command r2 in package radare2 Command ci in package rcs Command rc in package rcshell Command rg in package ripgrep Command ri in package ruby-ri Command sv in package runit Command sc in package sc Command ag in package silversearcher-ag Command sl in package sl Command st in package st from the x11-repo repository Command sr in package surfraw from the unstable-repo repository Command ts in package task-spooler Command am in package termux-am Command df in package termux-tools Command ht in package texlive-bin Command sn in package tin-summer Command tf in package tinyfugue Command ul in package util-linux Command cu in package uucp Command vi in package vim Command ex in package vim-gtk from the x11-repo repository Command vi in package vim-python Command vt in package virustotal-cli Command v in package vlang from the unstable-repo repository Command wg in package wireguard-tools Command xz in package xz-utils Command z3 in package z3 $         $sender_ip = null;         : command not found $         if (isset($_SERVER['REMOTE_ADDR'])) js_on":1bash: syntax error near unexpected token isset' $                 $sender_ip = $_SERVER['REMOTE_ADDR'];                 : command not found $   No command   found, did you mean: Command ab in package apache2 Command at in package at from the unstable-repo repository Command bc in package bc Command ar in package binutils Command cc in package clang Command [ in package coreutils Command lp in package cups from the unstable-repo repository Command sh in package dash Command dx in package dx Command ed in package ed Command ef in package electric-fence Command fd in package fd Command dl in package gatling Command gh in package gh Command gs in package ghostscript Command go in package golang Command gm in package graphicsmagick Command gc in package graphviz Command i3 in package i3 from the x11-repo repository Command iw in package iw from the root-repo repository Command jo in package jo Command jq in package jq Command k in package kona Command lf in package lf Command m4 in package m4 Command mc in package mc Command mg in package mg Command ts in package moreutils Command lz in package mtools Command mu in package mu Command mr in package myrepos Command ne in package ne Command nc in package netcat Command nu in package nushell Command o in package o Command o in package o-editor Command 7z in package p7zip Command ps in package procps Command pv in package pv Command r2 in package radare2 Command ci in package rcs Command rc in package rcshell Command rg in package ripgrep Command ri in package ruby-ri Command sv in package runit Command sc in package sc Command ag in package silversearcher-ag Command sl in package sl Command st in package st from the x11-repo repository Command sr in package surfraw from the unstable-repo repository Command ts in package task-spooler Command am in package termux-am Command df in package termux-tools Command ht in package texlive-bin Command sn in package tin-summer Command tf in package tinyfugue Command ul in package util-linux Command cu in package uucp Command vi in package vim Command ex in package vim-gtk from the x11-repo repository Command vi in package vim-python Command vt in package virustotal-cli Command v in package vlang from the unstable-repo repository Command wg in package wireguard-tools Command xz in package xz-utils Command z3 in package z3 $         $js_on = 0;         : command not found $         if (isset($_POST['js_on']) && $_POST['js_on'] == date("Y")) bash: syntax error near unexpected tokenisset' $                 $js_on = 1;                 : command not found $   �No command   found, did you mean: Command ab in package apache2 Command at in package at from the unstable-repo repository Command bc in package bc Command ar in package binutils Command cc in package clang Command [ in package coreutils Command lp in package cups from the unstable-repo repository Command sh in package dash Command dx in package dx Command ed in package ed Command ef in package electric-fence Command fd in package fd Command dl in package gatling Command gh in package gh Command gs in package ghostscript Command go in package golang Command gm in package graphicsmagick Command gc in package graphviz Command i3 in package i3 from the x11-repo repository Command iw in package iw from the root-repo repository Command jo in package jo Command jq in package jq Command k in package kona Command lf in package lf Command m4 in package m4 Command mc in package mc Command mg in package mg Command ts in package moreutils Command lz in package mtools Command mu in package mu Command mr in package myrepos Command ne in package ne Command nc in package netcat Command nu in package nushell Command o in package o Command o in package o-editor Command 7z in package p7zip Command ps in package procps Command pv in package pv Command r2 in package radare2 Command ci in package rcs Command rc in package rcshell Command rg in package ripgrep Command ri in package ruby-ri Command sv in package runit Command sc in package sc Command ag in package silversearcher-ag Command sl in package sl Command st in package st from the x11-repo repository Command sr in package surfraw from the unstable-repo repository Command ts in package task-spooler Command am in package termux-am Command df in package termux-tools Command ht in package texlive-bin Command sn in package tin-summer Command tf in package tinyfugue Command ul in package util-linux Command cu in package uucp Command vi in package vim Command ex in package vim-gtk from the x11-repo repository Command vi in package vim-python Command vt in package virustotal-cli Command v in package vlang from the unstable-repo repository Command wg in package wireguard-tools Command xz in package xz-utils Command z3 in package z3 $         $message = null;         : command not found $         if (isset($_POST['message']) && $_POST['message'] != '') bash: syntax error near unexpected token isset' $                 $message = $_POST['message'];        if (isset($_POST['js_on']) && $_POST['js_                : command not found $   No command   found, did you mean: Command ab in package apache2 Command at in package at from the unstable-repo repository Command bc in package bc Command ar in package binutils Command cc in package clang Command [ in package coreutils Command lp in package cups from the unstable-repo repository Command sh in package dash Command dx in package dx Command ed in package ed Command ef in package electric-fence Command fd in package fd Command dl in package gatling Command gh in package gh Command gs in package ghostscript Command go in package golang Command gm in package graphicsmagick Command gc in package graphviz Command i3 in package i3 from the x11-repo repository Command iw in package iw from the root-repo repository Command jo in package jo Command jq in package jq Command k in package kona Command lf in package lf Command m4 in package m4 Command mc in package mc Command mg in package mg Command ts in package moreutils Command lz in package mtools Command mu in package mu Command mr in package myrepos Command ne in package ne Command nc in package netcat Command nu in package nushell Command o in package o Command o in package o-editor Command 7z in package p7zip Command ps in package procps Command pv in package pv Command r2 in package radare2 Command ci in package rcs Command rc in package rcshell Command rg in package ripgrep Command ri in package ruby-ri Command sv in package runit Command sc in package sc Command ag in package silversearcher-ag Command sl in package sl Command st in package st from the x11-repo repository Command sr in package surfraw from the unstable-repo repository Command ts in package task-spooler Command am in package termux-am Command df in package termux-tools Command ht in package texlive-bin Command sn in package tin-summer Command tf in package tinyfugue Command ul in package util-linux Command cu in package uucp Command vi in package vim Command ex in package vim-gtk from the x11-repo repository Command vi in package vim-python Command vt in package virustotal-cli Command v in package vlang from the unstable-repo repository Command wg in package wireguard-tools Command xz in package xz-utils Command z3 in package z3 $ // The facility in which to store the query parameters bash: syntax error near unexpected tokennewline' $ $ct_request = new /lib/CleantalkRequest(); bash: syntax error near unexpected token (' $ $ct_request->auth_key = $auth_key; No command - found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $ $ct_request->agent = 'php-api'; No command - found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $ $ct_request->sender_email = $sender_email; No command - found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $ $ct_request->sender_ip = $sender_ip; => 'check_newuser',        �No command - found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $ $ct_request->sender_nickname = $sender_nickname; No command - found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $ $ct_request->js_on = $js_on; No command - found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $ $ct_request->message = $message; No command - found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $ $ct_request->submit_time = time() - (int) $_SESSION['ct_submit_time']; mbash: syntax error near unexpected token(' $   No command   found, did you mean: Command ab in package apache2 Command at in package at from the unstable-repo repository Command bc in package bc Command ar in package binutils Command cc in package clang Command [ in package coreutils Command lp in package cups from the unstable-repo repository Command sh in package dash Command dx in package dx Command ed in package ed Command ef in package electric-fence Command fd in package fd Command dl in package gatling Command gh in package gh Command gs in package ghostscript Command go in package golang Command gm in package graphicsmagick Command gc in package graphviz Command i3 in package i3 from the x11-repo repository Command iw in package iw from the root-repo repository Command jo in package jo Command jq in package jq Command k in package kona Command lf in package lf Command m4 in package m4 Command mc in package mc Command mg in package mg Command ts in package moreutils Command lz in package mtools Command mu in package mu Command mr in package myrepos Command ne in package ne Command nc in package netcat Command nu in package nushell Command o in package o Command o in package o-editor Command 7z in package p7zip Command ps in package procps Command pv in package pv Command r2 in package radare2 Command ci in package rcs Command rc in package rcshell Command rg in package ripgrep Command ri in package ruby-ri Command sv in package runit Command sc in package sc Command ag in package silversearcher-ag Command sl in package sl Command st in package st from the x11-repo repository Command sr in package surfraw from the unstable-repo repository Command ts in package task-spooler Command am in package termux-am Command df in package termux-tools Command ht in package texlive-bin Command sn in package tin-summer Command tf in package tinyfugue Command ul in package util-linux Command cu in package uucp Command vi in package vim Command ex in package vim-gtk from the x11-repo repository Command vi in package vim-python Command vt in package virustotal-cli Command v in package vlang from the unstable-repo repository Command wg in package wireguard-tools Command xz in package xz-utils Command z3 in package z3 $ //Additional parameters. bash: syntax error near unexpected token newline' $ $ct = new libCleantalk(); bash: syntax error near unexpected token(' $ $ct->server_url = $config_url; No command - found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $   No command   found, did you mean: Command ab in package apache2 Command at in package at from the unstable-repo repository Command bc in package bc Command ar in package binutils Command cc in package clang Command [ in package coreutils Command lp in package cups from the unstable-repo repository Command sh in package dash Command dx in package dx Command ed in package ed Command ef in package electric-fence Command fd in package fd Command dl in package gatling Command gh in package gh Command gs in package ghostscript Command go in package golang Command gm in package graphicsmagick Command gc in package graphviz Command i3 in package i3 from the x11-repo repository Command iw in package iw from the root-repo repository Command jo in package jo Command jq in package jq Command k in package kona Command lf in package lf Command m4 in package m4 Command mc in package mc Command mg in package mg Command ts in package moreutils Command lz in package mtools Command mu in package mu Command mr in package myrepos Command ne in package ne Command nc in package netcat Command nu in package nushell Command o in package o Command o in package o-editor Command 7z in package p7zip Command ps in package procps Command pv in package pv Command r2 in package radare2 Command ci in package rcs Command rc in package rcshell Command rg in package ripgrep Command ri in package ruby-ri Command sv in package runit Command sc in package sc Command ag in package silversearcher-ag Command sl in package sl Command st in package st from the x11-repo repository Command sr in package surfraw from the unstable-repo repository Command ts in package task-spooler Command am in package termux-am Command df in package termux-tools Command ht in package texlive-bin Command sn in package tin-summer Command tf in package tinyfugue Command ul in package util-linux Command cu in package uucp Command vi in package vim Command ex in package vim-gtk from the x11-repo repository Command vi in package vim-python Command vt in package virustotal-cli Command v in package vlang from the unstable-repo repository Command wg in package wireguard-tools Command xz in package xz-utils Command z3 in package z3 $ //Check bash: syntax error near unexpected token newline' $ $ct_result = $ct->isAllowMessage($ct_request); bash: syntax error near unexpected token(' $         if ($ct_result->allow == 1) bash: syntax error near unexpected token $ct_result-' $                 echo 'Message allowed. Reason ' . $ct_result->comment; �          'submit_time' => time() - (int) $_SESSION                echo: command not found $         else bmit_time'], /        else: command not found $                 echo 'Message forbidden. Reason ' . $ct_result->comment;                 echo: command not found $         echo ' ';         echo: command not found $ } bash: syntax error near unexpected token}' $ else bash: syntax error near unexpected token else' $         $_SESSION['ct_submit_time'] = time(); bash: syntax error near unexpected token(' $ ?>[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]@[email protected]@charter.net No command ? found, did you mean: Command [ in package coreutils Command k in package kona Command o in package o Command o in package o-editor Command v in package vlang from the unstable-repo repository $ function diffUsingJS() { // get the baseText and newText values from the two textboxes, and split them into lines var base = difflib.stringAsLines($("baseText").value); bash: syntax error near unexpected token `(' $ var newtxt = difflib.stringAsLines($("ne' https://moderate.cleantalk.org/api2.0 https://moderate.cleantalk.org/api2.0 https://f-droid.org/packages/com.termux.api https://f-droid.org/packages/com.termux.api https://conversations.im/ https://conversations.im/ http://schemas.android.com/tools https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml#alpn-protocol-idsbash https://www.iana.org/assignments/tls-extensiontype-values/tls-extensiontype-values.xhtml#alpn-protocol-ids https://tools.ietf.org/html/rfc2595#section-7 https://tools.ietf.org/html/rfc2595#section-7 https://github.com/stpeter/manifesto/blob/master/manifesto.txt https://github.com/stpeter/manifesto/blob/master/manifesto.txt

This readme is quite insightful.

For anyone curious, onion to onion (and even non-onion to onion) works today if the involved SMTP servers know how to handle it. For example, the OnionMX project. https://github.com/ehloonion/onionmx

Great question! onion vhosts ([email protected] addresses) don't need that, as long as your client can resolve onion addresses (Gajim/Conversations have good tor integration, otherwise Tor's AutomapHostsOnResolve will do the trick systemwide but in that case your client may complain that the domain doesn't support TLS or with a wrong certificate).

"Advanced" connection settings is required when the vhost you are connecting to doesn't match the hostname you need to reach on the network. For example, if you're reaching your server over a VPN/SSH/IPSEC tunnel.

Another example is if you wish to login as [email protected] by reaching foobar.onion. This is useful if you want to be part of the broader Jabber federation, in which not every host supports federation over onion addresses (i'd be curious to make stats about that) but it still gives you the security guarantees of Tor when reaching your server (though not for server-to-server connections).

Onion name discovery for automatically upgrading to onion routing when Tor is available client-side is not yet specified within the XMPP ecosystem. Onion discovery in the HTTP ecosystem is usually done via Onion-Location HTTP header (HTTPS only), in the email ecosystem they use _onion-mx DNS SRV records: see https://gitweb.torproject.org/tor-browser-spec.git/tree/prop... and https://github.com/ehloonion/onionmx/blob/master/SRV.md respectively

Implementing something similar XMPP side would be easy. Prosody already has a community mod_onions, but currently only supports a static map of hosts to their onion addresses. It could use some love: https://modules.prosody.im/mod_onions.html

Another problem we face from a UX perspective for onion services is that currently XMPP server implementations are very strict about which node/resource messages are intended for, and to my knowledge none support aliasing systems as we have in the email world. In this specific example application of aliases, there's currently no way (that i know of) to have the same account across .org/.onion domains and having servers to know it's the same account in a federated manner, eg. to prevent you from adding the same person twice to your contact list.

All in all there's interesting challenges and none of them is really hard so if you'd like to get involved or just let us know about your ideas and expectations, feel free to drop by xmpp:[email protected]?join