Re: [jdev] obtaining XMPP accounts

On Tue, Dec 8, 2015, at 01:04 PM, Kevin Smith wrote: > On 8 Dec 2015, at 21:01, Dave Cridland wrote: > > On 8 December 2015 at 20:53, Peter Saint-Andre wrote: > > On 12/8/15 1:07 PM, Dave Cridland wrote: > > > > Certainly I do have the feeling that as an >

[jdev] Silicon Valley Realtime meetup

event. Justin ___ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

[jdev] Fanout hiring (SF bay)

Hey folks, Fanout ( http://fanout.io/ ) raised money this summer so we can actually afford to pay people. Hooray! If you're a high scalability person that can hack in C/C++/Python and you live in the SF bay area, let me know. Justin ___ JDev

Re: [jdev] Buddycloud. Hosted.

On 04/18/2014 08:23 AM, Abmar Barros wrote: The Buddycloud team is pleased to announce the release of the Buddycloud hosted platform. Buddycloud hosted enables developers to quickly start using Buddycloud by providing a self hosted version of the full stack, which means an XMPP-enabled domain,

Re: [jdev] [Security] Spoofing of iq ids and misbehaving servers

random but the from address is checked. Justin ___ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

[jdev] Early-stage startup opportunity in SF area

-time employment elsewhere is not acceptable. Must be in the SF Bay area and willing to meet regularly near Mountain View. If interested, email me privately. Thanks! -- Justin Karneges Fanout, Inc. 530-220-7222 ___ JDev mailing list Info: http

Re: [jdev] decentralized omniscience

On 03/29/2013 09:55 AM, Kevin Smith wrote: On Sat, Mar 16, 2013 at 12:11 PM, Justin Karneges jus...@affinix.com wrote: The reason I bring this up here is to discuss some protocol. I think all that is really needed for a system like this to work is for the smart entity to act as a proxy

[jdev] decentralized omniscience

In thinking about federated social networks, I started to wonder if certain features enjoyed in monolithic systems might not carry over very well to our world. There are many situations where Facebook tailors your view based on its all-knowing graph database, but these kinds of things may be

Re: [jdev] XMPP APIs

people to be able to whip up simple apps for, then you pretty much have to offer HTTP at minimum. Justin ___ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] XMPP APIs

be useful and the irony kills me. Justin ___ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

[jdev] XMPP APIs

been in place some months. Can't remember if I mentioned it at the summit. But I finally wrote about it now: http://blog.fanout.io/2013/01/12/using-the-api-via-xmpp/ Is anyone else doing this sort of thing? Justin ___ JDev mailing list Info: http

Re: [jdev] Local history storage

a new XEP that specifically discusses a file format. Even though it's not a network protocol, I think the XSF is not a terrible place to pursue this. It reminds me of XEP-38 (emoticon file format). Justin ___ JDev mailing list Info: http

[jdev] message queuing

, and this is a fine thing. Curious about others' experience in the clustered server space. Justin ___ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

[jdev] Announcing Fanout.io, the versatile push service

also got some really good HTTP stuff, for those that need it, like webhooks and long polling. Your one stop shop for scaling push. Here's the full announcement: http://blog.fanout.io/2012/09/03/realtime-multicasting-over-http-xmpp/ I'm very interested in feedback. :) Thanks, Justin

[jdev] _jabber._tcp needed anymore?

I'm curious if anyone still needs to put this in their DNS to support legacy servers? Does anyone do it? I noticed I had it in mine. Anyone know when _xmpp-server showed up in jabberd1? Justin ___ JDev mailing list Info: http://mail.jabber.org

Re: [jdev] KRTConf

, the challenges of writing realtime code and scaling it, and business aspects. Pretty cool to have a whole conference about realtime. Justin ___ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] Fwd: XMPP in the browser -- your thoughts?

a case for some XMPP over Websockets transport binding, but beyond that these are two separate technologies with different purposes. -Justin ___ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] s2s implementation

not completely in sync unless the server send probe on behalf of already online users. Which it could (and probably should). -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev

Re: [jdev] Best ways for a JID to advertise what services it uses?

iq type=result from=u...@example.com id=1 query xmlns=http://jabber.org/protocol/delegate; service type=pubsub jid=users.freepubsubforall.com/ service type=livefyre jid=services.livefyre.com/ /query /iq Just tossing it out as a rough idea to start from. -Justin

Re: [jdev] presence subsription rejection notifications whi le offline.

people find the event to be rude. I know that breaking an active subscription isn't the same as denying a subscription request, but I'm sure there's overlap in the code so I just wanted to throw that out there. -Justin ___ JDev mailing list Forum: http

Re: [jdev] Working around NAT problems: pwnat

://mail.jabber.org/pipermail/jdev/2010-March/088164.html -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] about GSOC idea on psi( Jingle RTP Encryption)

before being fed into psimedia. Let me know if you have further questions or need more explanation. -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev

Re: [jdev] New(?) NAT-to-NAT client-server tunneling method

or maintain an intermediary service to act as a signaling channel, then this looks like a neat tool. It probably has no fit with XMPP though. We have a signaling channel where we can use STUN correctly. And we can do more than just STUN, too. -Justin

Re: [jdev] questions about gsoc: file transfer over jingle

, or for networks that block UDP), but just not nearly as useful. -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] Resource binding

be conservative about our changes to the core specs. -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] Login with SASL credentials unrelated to domain username

). If unspecified, then the authcid is assumed to be the JID node. -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] XEP-0153 Avatars conflict with several resources

On Tuesday 22 September 2009 12:43:22 Robert Quattlebaum wrote: I know google talk does this, or something similar. I believe they do this because they found several clients which were not properly calculating the hash or the image in te vCard. It also has the nice effect of making your avatar

Re: [jdev] wildcards vs. multiple certs

on the domain name specified by the peer server. You can put many names into one cert. For a short set of domains, this ought to be practical. -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org

Re: [jdev] a vision

recommended Google Talk to new users. It doesn't really matter if Google has better uptime. The point is to get the blame right. -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman

Re: [jdev] a vision

was to actually get rid of jabber.org entirely. ;-) -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] a vision

them more widely -- perhaps just Europe and North America to start, but eventually in many locations so that people can use local relays everywhere. I don't think it can hurt to do this, if the resources are there. -Justin ___ JDev mailing list Forum

Re: [jdev] Scope of current RFC3920 SASL implementation

at a JID. -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] facebook jabber?

On Sunday 25 January 2009 13:03:12 Tim Julien wrote: anyone heard any updates on this? http://developers.facebook.com/news.php?blog=1story=110 http://bugs.developers.facebook.com/show_bug.cgi?id=3152 The latest word as of November is: some people are working on this. it will probably be

Re: [jdev] GSSAPI and service hostname

the user can type the connect host in advance, to mark as trusted). -Justin ___ JDev mailing list Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org ___

Re: [jdev] GSSAPI and service hostname

if the right host has multiple host keys for the xmpp service, the attacker could cause you to successfully authenticate to the wrong XMPP host? Well, whether that attack is really a problem or not, at least XEP-233 does close it off. -Justin ___ JDev

Re: [jdev] Initial presence and contact capabilities

encouraging the behavior. -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists/jdev-faq Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: [EMAIL PROTECTED] ___

Re: [jdev] How to do SASL authentication in C/C++

is publicly reachable and has a valid domain name, then yes. -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists/jdev-faq Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev

Re: [jdev] How to Do Groupchat in Jabber

. This dialback procedure is a standard mechanism in Jabber to prevent domain spoofing. -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists/jdev-faq Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman

Re: [jdev] How to do SASL authentication in C/C++

/digest-md5-crash.html -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists/jdev-faq Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: [EMAIL PROTECTED] ___

Re: [jdev] Talk To Jabber Server Using Sockets

compiler installation. I suggest taking that issue to a different forum. -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists/jdev-faq Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman

Re: [jdev] BOM

.. -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists/jdev-faq Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: [EMAIL PROTECTED] ___

Re: [jdev] Presence hiccups

of its own connected clients. This is a widespread problem with c2s connections, usually among wi-fi or mobile users. Anyway, the c2s case is not your problem. The s2s case you just do the best you can. -Justin ___ JDev mailing list FAQ: http

[jdev] s2s and xep-198 session resumption

On Thursday 02 October 2008 21:09:37 Justin Karneges wrote: Periodically reacquainting yourself with remote servers is really the only solution. (... to clearing away stale presence) Suppose you want to check on interesting JIDs every 10 minutes. Instead of connecting to a remote server

Re: [jdev] parsing xml (xmpp) with ruby

behavior like this for round-trip optimization. -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists/jdev-faq Forum: http://www.jabberforum.org/forumdisplay.php?f=20 Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: [EMAIL

Re: [jdev] ruby xmppd, and Psi

/. I don't think you're supposed to send response data with PLAIN, are you? success/ (no response data) is correct, not success=/success (response data of zero-length). -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists/jdev-faq

Re: [jdev] Communicate between two client instances of the same ID

transmission of other stanzas (you cannot send many stanzas in parallel over one stream). Any XMPP-based protocol which might need to transmit large datasets should have a mechanism for chunking or paging. See XEP-47 or XEP-59 as building blocks. -Justin

Re: [jdev] Presence leak test suite

to :) And a random resource isn't necessary anyway, just good privacy control on the server. (/me still wants a server that will bounce all iqs from people who don't have his presence.) -Justin ___ JDev mailing list FAQ: http://www.jabber.org/discussion-lists

Re: [jdev] Presence leak test suite

On Wednesday 09 July 2008 09:33:32 Peter Saint-Andre wrote: Justin Karneges wrote: On Wednesday 09 July 2008 07:55:58 Kevin Smith wrote: On Wed, Jul 9, 2008 at 3:46 PM, Peter Saint-Andre [EMAIL PROTECTED] wrote: you also test presence leaks using guessed well-known resources like

Re: [jdev] Yahoo / Google Talk interop

need an AIM account to use AIM through GTalk, so it's clearly not federated. What's interesting is that Yahoo federates with MSN. Somehow I don't see Microsoft's blessing on a Yahoo-GTalk federation due to the doors that would open. My hopes are on Facebook.. -Justin

Re: [jdev] Authentication Process For Jabber.com

On Monday 10 March 2008 2:01 am, Sergei Golovan wrote: On 3/10/08, Justin Karneges [EMAIL PROTECTED] wrote: Further, since some XML parsers throw error when an unrecognized prefix is encountered, those clients/servers would most likely respond not with a stanza error, but with an xml

Re: [jdev] Authentication Process For Jabber.com

clients shouldn't be generating invalid XML, but servers shouldn't be routing it either. A good server would disconnect whoever sent gajim:die rather than routing it and DoS'ing other clients. -Justin

Re: [jdev] Sharing a single connection for multiple users

that supports edge servers such as jabberd+jadc2s. -Justin

Re: [jdev] Sharing a single connection for multiple users

a protocol issue, but a server deployment/implementation issue. -Justin

Re: [jdev] Why is my jabber server kicking out a remote user on an error?

where the original message came from. I believe this is a bug in ejabberd muc. I don't know the status of a solution. -Justin

Re: [jdev] last presence confusion

practices here, or possibly some protocol elements. -Justin

Re: [jdev] last presence confusion

On Friday 25 January 2008 7:06 am, Maciek Niedzielski wrote: On Sat, Dec 22, 2007 at 12:23:38PM -0800, Justin Karneges wrote: On Thursday 20 December 2007 2:52 pm, Peter Saint-Andre wrote: 2. Else, if the contact has no available resources, the server MUST either (1) reply

Re: [jdev] last presence confusion

On Friday 25 January 2008 11:09 am, Peter Saint-Andre wrote: Maciek Niedzielski wrote: Peter Saint-Andre wrote: Maciek Niedzielski wrote: On Sat, Dec 22, 2007 at 12:23:38PM -0800, Justin Karneges wrote: On Thursday 20 December 2007 2:52 pm, Peter Saint-Andre wrote: So a nice server

Re: [jdev] last presence confusion

reply, while not causing existing servers to become non-compliant. -Justin

Re: [jdev] Google to Connect to Other IM Networks Using Jabber Transports?

attempts by third-parties to access the AIM integration. What if someone wrote a new Jabber transport that required 4 fields: gmail account name, gmail password, aim account name, aim password? Would this give the rest of the XMPP world legit access to AIM via double-transporting? -Justin

Re: [jdev] XEP-0198 implementation

On Monday 03 December 2007 6:48 pm, Peter Saint-Andre wrote: Magnus Henoch wrote: I've started hacking a server-side implementation of XEP-0198 (stanza acking). Connect to bazarhoff.cd.chalmers.se and try it out. Super. I think Justin Karneges may still have some changes to make

Re: [jdev] [ANN]VTD-XML 2.2

I didn't even tie the announcement to XMPP, leaving the readers to figure it out. -Justin

Re: [jdev] How to specify username with SASL ANONYMOUS

, possibly an email address (like how anonymous FTP would often ask you to put your email address as the password, that's what this essentially replaces). It might be interesting to specify in XEP-175 that the trace data may be used as a node suggestion. -Justin

Re: [jdev] Child nodes of DOM Attr

. They do not have child text nodes. You mentioned Qt DOM. In that case consider QDomAttr.setValue(value). More conveniently, just call QDomElement.setAttribute(name, value). -Justin

Re: [jdev] File Transfer Interoperability

documenting. -Justin

Re: [jdev] File Transfer Interoperability

On Wednesday 08 August 2007 12:22 am, Sergei Golovan wrote: On 8/8/07, Justin Karneges [EMAIL PROTECTED] wrote: I wouldn't put this at the IBB level. A negotiation timeout will work well enough there. The problem you speak of, which does indeed happen a lot, has more to do with the SI

Re: [jdev] File Transfer Interoperability

be misinterpretted. Rather than fiddling with the x:data form, how about going the traditional route and adding some new namespaced elements/attributes? We can take a time machine back to 2003: http://mail.jabber.org/pipermail/members/2003-August/002570.html -Justin

Re: [jdev] File Transfer Interoperability

not have any of the problems described in the igniterealtime thread. The situation may not be as bad as you think. -Justin

Re: [jdev] sending presence to specific transport

login to the Jabber server only, and then individually login (or logoff!) transports. -Justin

Re: [jdev] RE: [Standards] Re: compliance levels for 2008

is the only standard file transfer. -Justin

Re: [jdev] Which open-source Jabber client is best to develop?

Yes. Also Jabbin, SAPO Messenger (Mac), and more.. Psi/Iris has a steeper learning curve than the other options, but it is a well-proven client platform. Also, I like to think of the Qt dependency as a feature. :) -Justin On Monday 23 April 2007 11:55 am, Nathan Fritz wrote: Doesn't KoPete

Re: [jdev] What is the purpose of the rspauth?

how this value is calculated or verified though. This should be described in RFC 2831, read deeper. :) -Justin

Re: [jdev] end-to-end encryption -- making it happen

members in the security community that not only will do a basic error check, but will also ask important questions like, why the hell are you doing it this way? :) I'll be implementing RFC 3923 until then. -Justin

Re: [jdev] end-to-end encryption -- making it happen

On Tuesday 09 January 2007 12:24 pm, Peter Saint-Andre wrote: Justin Karneges wrote: First, we need thorough security reviews of all the specifications by multiple parties. All the existing specs (RFCs/MUC/etc.) or the esession specs? Security reviews of all the existing specs is a good

Re: [jdev] Re: XHTML-IM XEP implementation

. -Justin

Re: [jdev] XHTML-IM XEP implementation

simplifies down to one character for presentation, then we should probably respect this in XHTML-IM. -Justin

Re: [jdev] XMPP Ping method?

On Wednesday 01 November 2006 9:17 am, Peter Saint-Andre wrote: Justin Karneges wrote: This seems unlikely though, as I think the RFC revision has already been made, and there was no consideration for these features. It is not accurate to say that the RFC revision has already been made

Re: [jdev] Re: XMPP Ping method?

is too much to ask for, when just an element or two in XMPP over TCP will solve our problems. -Justin

Re: [jdev] Re: XMPP Ping method?

On Friday 03 November 2006 11:00 am, Michal 'vorner' Vaner wrote: On Fri, Nov 03, 2006 at 10:50:37AM -0800, Justin Karneges wrote: On Friday 03 November 2006 8:29 am, Peter Saint-Andre wrote: Norman Rasmussen wrote: It might make sense in rfc3920bis to make a small note that SCTP can

Re: [jdev] XMPP Ping method?

. http://www.xmpp.org/extensions/inbox/ack.html -Justin

Re: [jdev] XMPP Ping method?

it even got a XEP number). The JSF Council recommendation was to take care of these features in the XMPP-Core RFC instead of a XEP. This seems unlikely though, as I think the RFC revision has already been made, and there was no consideration for these features. -Justin

Re: [jdev] forum for jabber

-im.org/ The Help and General Chat section is for anything at all. There are many Jabber developers reading the Psi forum so you'll probably get help. -Justin

Re: [jdev] Discovering the Federation.

to pick the right one. For Hal's purposes, SRV alone is probably enough. -Justin

Re: [jdev] Re: help needed to implement a P2P Chat Client

). -Justin

Re: [jdev] jabber server name by ip

in the 'from' attribute of the stream header sent before termination. This could happen if there is an error while the stream is being set up, like if you telnet to port 5269 and type jibberish. -Justin

Re: [jdev] s2s lookup cascades

does it so people can have jabber subdomains without modifying the DNS, but all this does is break the network for non-Wildfire users. -Justin

Re: [jdev] help needed in communicating with jabber server

' version='1.0' You get this: Jabber Server Responds:- failure xmlns='urn:ietf:params:xml:ns:xmpp-tls'//stream:stream -Justin

Re: [jdev] cert handling in xmpp server implementations

wondering how to do it in code, have a look at the qca-openssl plugin from the QCA project: http://websvn.kde.org/trunk/kdesupport/qca/plugins/qca-openssl/qca-openssl.cpp?rev=540405view=auto Search for 'XMPP' in there. -Justin

Re: [jdev] cert handling in xmpp *client* implementations

- system Safari - system Firefox - bundled Thunderbird - bundled Psi 0.11 - system -Justin

Re: [jdev] cert handling in xmpp server implementations

. :) It is a standard format by the way, not a Microsoft-ism, and OpenSSL has supported it since forever. I plan to support both methods. And that will go for Psi too, when specifying a client cert (something I don't think you mentioned in either thread?). -Justin

Re: [jdev] Re: GNUPG as DLL

of GnuPG slowness being bad for fast typers. However, this has more to do with Psi's disabling (graying) of the chat input field during encryption than the speed of GnuPG. The behavior in Psi is intentional, but it is not the only behavior possible. -Justin

Re: [jdev] GNUPG as DLL

, but acceptable. -Justin

Re: [jdev] Local proxy for multiple applications

, but so far it hasn't really caught on. There have been a couple of attempts at a client daemon, the most recent being Edrin's xcd for Windows. I'd like to revive this idea sometime in the future, but I'm not sure when. -Justin

Re: [jdev] Security-related thought experiment

, this problem is not fixed. -Justin

[jdev] jabberd2s11 - stable release 11 (security release)

Stepehn Marquard Justin Kirby

Re: [jdev] JID and X.509

, such as XMPP. I guess if things get complex then the user will want to bring along an ASN.1 parser, but at least it will be possible. -- Good luck, -Justin

Re: [jdev] JID and X.509

like a namespace, and the prefix helps give an idea of what it is for, which I think is Identity-OtherName (just a guess). This namespace string doesn't appear in the Certificate anywhere, only the OID does, so there's no reason to get too hung up about it. -Justin

Re: [jdev] Re: JEP-0027 (OpenPGP) implementation question

a Matlock show, where Andy knows who did it, even if he doesn't have court-admissable evidence yet. -Justin

Re: [jdev] Re: JEP-0027 (OpenPGP) implementation question

. -Justin

Re: [jdev] JEP-0027 (OpenPGP) implementation question

tricky. -Justin

Re: [jdev] virtual hosting and certificate checking

starttls. Sadly, no one actually uses this great spec. -Justin

  1   2   3   4   >