This is a great write up. I kind of wish they went into the security aspects of metadata leaking. But otherwise really love this write up
FYI, Conversations, the most popular XMPP client on Android is going to be getting a Material 3 redesign soon-ish. You can check out the "c3" on their Codeberg repo to see where it's at, but from what I've seen, it's promising!
Didn't know about this. That's interesting!
Are you referring to this c3 branch? If so, there havent been any commits or pull requests for a few months now. Is there a timeline posted anywhere for the "soon-ish" release of the redesign?
Yeah I meant the c3 branch, and I have no clue about the timeline the dev is aiming for, though I recall them saying they wanted to release it this year, but that could have changed by now
What is an actual popular client that uses xmpp
On Android and IOS, i like Snikket.
On desktop, Gajim
Conversations, Cheogram, Dino are the ones I've used.
Gajim, Profanity. There’s probably a Weechat plugin. There’s also handful of JS ones, but I like the polish of Movim (and it’s also a client for an entire decentralized social media platform if you want it to be).
Conversations is paid and has like 100k downloads, and it looks like it's from Android kitkat. The other two don't even exist on the app store. Do you consider these to be popular? I'm looking for actual popular apps, just like I can say Element for Matrix.
Pidgin?
Doesn’t support OMEMO for encryption, just OTR which is quite limiting given how most folks tend to chat on multiple devices now.
XMPP is great but the clients are all really bad.
Session is where it's at.
Why does it call XMPP "Chat Standard"?
From the perspective of private users, WhatsApp is the benchmark
Not entirely, there is also Discord
WhatsApp, Signal, & some others use the same open standardization end-to-end encryption. It’s the bare minimum bar for acceptable (but most of these apps require a primary Android/iOS device to hold the key which plays right into that duopoly as well as making smart phones a requirement rather than optional).
Discord has no e2ee, many rooms require phone numbers, the service is proprietary, they have trackers, they send cease & desists to projects wanting to be alternate clients. These are not the hallmarks for privacy or security.
Tbh I have not really encountered people saying they use Discord for privacy reasons, usually it's people complaining about the privacy implications of discord
I don't think it's that meaning of "private" that's meant here. It's private as in personal, rather than an organization
This is a great write up. I kind of wish they went into the security aspects of metadata leaking. But otherwise really love this write up