XMPP

Die Freitagsrunde betreibt jetzt einen eigenen Jabber-Server (a.k.a. XMPP) für alle Mitglieder die einen Account auf freitagsrunde.org haben. Jabber ist ein offenes, sicheres und verteiltes Instant-Messaging Protokol, welches alle verwenden können um mit einander einfach zu kommunizieren.

Das bedeutet für alle nicht-Mitglieder, daß alle Mailadressen in der gleichen Form (<dein Freitagsrundenname> @ freitagsrunde.org) gleichzeitig auch als Jabber-ID zu verwenden sind, vorausgesetzt natuerlich, der Account wird auch aktiv genutzt.

Verbinden

Mit deinem Jabber-Client:

• Benutzername: <dein Freitagsrundenname>
• Server: stan.freitagsrunde.org
• Port: 5222 (ssl aktiviert und wird vom Server erwartet. Der Server wird keine nicht SSL-Verbindungen akzeptieren!)

FAQ

• Warum sollte ich Jabber benutzen?

Because it's a great way to communicate securely with other people while protecting your privacy. It's easy to use, free and open source and it's decentralized which means that no central authority is watching over what you say, when you say it, and to whom you say it. It's widely adopted and users can communicate with other jabber users on any other jabber server, for example, gtalk, jabber.ccc.de, jabber.org and thousands of others. AOL IM may allegedly be moving its platform to xmpp/jabber soon.

• Which clients exist?

Many open source, high quality clients exist for jabber. Many of them even support multiple IM protocols so you can continue to use your existing im service at the same time. Some clients which work the best for us include: Pidgin, Adium and Mirandaim. At the moment, some other clients appear to be having difficulties with our CACert ssl certificate. We are working to resolve this problem.

• How do I communicate securely?

Although all traffic between users at freitagsrunde.org is encrypted between the client and server, it is still recommended to use end-to-end encryption to protect your privacy! Freitagsrunde recommends OTR off the record messaging encryption. We actually recommend that users do NOT use any other forms of IM encryption due to fundamental flaws in their Security Aims (Sicherheitzziele) which place your security at risk. The details of why we recommend this are provided at the OTR site.

There are implementations of OTR which can be installed as a plug-in for many of the most popular jabber clients. To use the encryption correctly, both parties must perform two steps: 1) Both users must have the plug-in installed and enabled. 2) When one user sends the very first encrypted message to the other user, a key exchange will take place and both users must verify the newly exchanged key fingerprints with the other user over an EXTERNAL communication medium like telephone, secure email, and specifically, not over the im conversation. This step is performed only once, when the very first encrypted conversation takes place and it is crucial in order to prevent man-in-the-middle attacks.