Re: jabber.gnome.org: a proposal

2013-03-13 Thread Martyn Russell

On 12/03/13 13:38, Shaun McCance wrote:

On Tue, 2013-03-12 at 09:26 +0100, Bastien Nocera wrote:

Hey,

On Mon, 2013-03-11 at 10:03 -0400, Shaun McCance wrote:

Hi all,

I think it's clear from the recent thread that most people had
no idea we had a Jabber server, or that they could get accounts
on it, or how to go about doing so.

What's more, over the last week, I tried to help two people use
their jabber.gnome.org accounts with no success.

I think it's unfair to judge the popularity of this service when
it has been so buried and so extremely difficult to use.

It also seems we can't create group chats on jabber.gnome.org,
which limits our ability to use it as an official channel for
GNOME teams.

I propose that we address these issues to give Jabber a fair
shake. We can then reevaluate its popularity in six months.


As I already mentioned privately, I don't think the admins want to have
to maintain the OpenFire Jabber server. First, as Olav mentioned,
there's no SSL support for a service where you would expect privacy.
Furthermore, I would expect the security concerns of running such a big
service on GNOME servers to be a burden on the admins.


Is this just because we chose a particularly bad Jabber server?
I have a hard time believing nobody's figured this out yet.


Openfire is fine. We (Lanedo) have had no problems with it in our time 
using it.



Incidentally, SSL doesn't work on our IRC network. So I get to
send my password in plain text to register with our new bot.


SSL works for us with Openfire - so I wonder what is configured 
differently for GNOME.


Is this more about ease of configuration or security?

--
Regards,
Martyn

Founder and CEO of Lanedo GmbH.
___
foundation-list mailing list
foundation-list@gnome.org
https://mail.gnome.org/mailman/listinfo/foundation-list


Re: jabber.gnome.org: a proposal

2013-03-13 Thread Olav Vitters
On Tue, Mar 12, 2013 at 09:26:33AM +0100, Bastien Nocera wrote:
 to maintain the OpenFire Jabber server. First, as Olav mentioned,
 there's no SSL support for a service where you would expect privacy.

There is SSL. Just that:
1) they broke it in a newer version and never fixed it in any
reasonable timeframe (3 months)
2) getting the certificate installed was a complete mess. Had to convert
the standard certificate in some terrible format and took a lot of
effort to figure out.

Current server does SSL IIRC. Though maybe by now it expired again.


What I had to go through for SSL:
https://bugzilla.gnome.org/show_bug.cgi?id=592836#c8

Couldn't quickly see the bug about openfire messing up their SSL
support. 'Fix' was easy though, downgrading.

-- 
Regards,
Olav
___
foundation-list mailing list
foundation-list@gnome.org
https://mail.gnome.org/mailman/listinfo/foundation-list