whatever
[kill9.git] / no_category / xmpp.md
1 XMPP servers comparision
2 ========================
3
4 Well, here I am going to compare XMPP servers. As we all know XMPP is a
5 descentralizeted protocol. So you can have an account in servera.tld and
6 your friend can have an account in serverb.tld and communicate without
7 problem.
8
9 The best thing to do is to setup your own XMPP server. But, obviously,
10 not everyone can do this. So public servers exists for some reason. In
11 this article I am going to compare all the XMPP public servers I\'ve
12 seen. What they recollect, how to register to them and stuff like that.
13
14 Trashserver.net
15 ===============
16
17 Let\'s dig onto their [privacy
18 policy](https://trashserver.net/en/privacy/)!
19
20 >IP addresses of users are not logged by default. Exception: In case of
21 >incorrect login attempts, the IP address is logged to prevent attacks on
22 >accounts.
23
24 Awesome! Just be sure to type your password correctly and no IP will be
25 logged. Also, some clients, like Gajim, Conversations and ChatSecure
26 supports connecting from Tor. (By the program\'s settings. For another
27 client just use torsocks or something like that)
28
29 >No personal data is required for registration.
30
31 Registration is closed. So I cannot test this now.
32
33 >To keep messages synchronized across multiple devices and exchange
34 >messages even when two subscribers are not online at the same time,
35 >messages are cached on the server for up to 4 weeks.
36
37 Well, understandable. If you don\'t want to do this. You have two
38 options:
39
40 1. Use OMEMO/OpenPGP/OTR
41 2. Disable the logging feature in your client.
42
43 >Contents uploaded via http~upload~ remain stored on the server for 4
44 >weeks
45
46 If you don\'t want content to be in trashserver\'s. Don\'t upload files
47 to it. Or use OMEMO/PGP/OTR
48
49 Awesome! This server seems good!
50
51 >If I am required to cooperate with law enforcement authorities under
52 >any applicable law, information will be disclosed in accordance with the
53 >applicable law.
54
55 Aw, shit.
56
57 Good server. But be sure to always use OMEMO/PGP/OTR so this last point
58 is less harmful. Middle tier.
59
60 404.city
61 ========
62
63 Alright what the fuck? I have to solve a ReCraptcha to create an
64 account? in the absolute trash it goes!
65
66 [Privacy policy](https://wiki.404.city/en/404.city:_Privacy_Policy):
67
68 >We store your contact list, connection time and current session IP
69 >address. To prevent spam from 02/12/2020 we save account registration
70 >information. We are not located on the surface of Mars and we will be
71 >obliged (as anyone else) to provide this data by officially confirmed
72 >government request in the United States or the European Union.
73
74 Alright, they store, your **IP Address** and when you connected. Don\'t
75 even think on creating an account here. And would give info to feds.html
76 **SHIT TIER**
77
78 Snopyta
79 =======
80
81 You have to create to enable JS to create an account. Err.
82
83 Well, but nothing else is needed! No Craptchas!
84
85 Now, in their [privacy
86 policy](https://snopyta.org/service/xmpp/xmpp_privacy_policy.html):
87
88 > Login credentials are stored in encrypted form and never shared with
89 >other parties.
90
91 Good.
92
93 >No IP adresses are stored by default on our servers. We may temporary
94 >enable logs which contain IP addresses if needed for debugging. These
95 >logs are deleted immediately after action has been taken and are kept
96 >for a maximum of 24 hours.
97
98 Well, you have to be out of luck for Snopyta to log your IP. Anyways,
99 you can always log in using Tor. I don\'t know if Snopyta gives .onion
100 services for their XMPP.
101
102 >Messages sent to you while you are offline are stored until you
103 >connect or your account is deleted.
104
105 Yeah, use OMEMO or PGP
106
107 The rest of the privacy policy is just XMPP basic stuff. High tier.
108
109 Riseup
110 ======
111
112 Ah, the old reliable. Right?
113
114 **NO!**
115
116 Riseup has a good privacy policy. XMPP is not the exception but their
117 XMPP server sucks!
118
119 You cannot even [Upload
120 files](https://compliance.conversations.im/server/riseup.net/) to it!
121 Altought it does not support **A LOT** of XEPs. That all the previous
122 server supports. Low tier. If you con\'t care about it. Riseup has a
123 good privacy policy (they literally would rather to [nuke the
124 server](https://riseup.net/en/about-us/policy/government-faq) than
125 surrender to the goverment) then it is high tier.
126
127 Wait what? You're telling me that Riseup accepts non-trusted
128 connections? WHAT? ABORT EVERYTHING. NEVER USE THIS
129
130 jabber.lqdn.fr
131 ==============
132
133 Literally who XMPP server. Yes, but Digdeeper uses it.
134
135 In the registration. E-mail is optionan. Which is good, and no craptchas
136 are needed.
137
138 [Privacy policy](https://jabber.lqdn.fr/frequently-asked-questions/):
139
140 Messages in the server sent to someone offline are logged until sent.
141 Alright, as always, use OMEMO/blah blah/
142
143 >Your list of contacts (that's how xmpp/jabber protocol is working)
144
145 Well, I guess.
146
147 >The date of last connection for each account, so that we can delete
148 >account when they are unused for 6 months. (But we don't keep the IP
149 >address from where you connect.)
150
151 Well, that\'s ok.
152
153 Well, the privacy policy is ok. High tier
154
155
156 # Creep.im
157
158 Oh, okay! first thing we see when accessing the website is "IPs are
159 not logged" Good start!
160
161 You can create an account directly in the client! Awesome!
162
163 You can connect to a .onion link!
164
165 This is too good to be true.
166
167 And indeed it is. If you want to talk to someone in a creep.im
168 account. You'll have to solve a craptcha. Don't use creep.im if you
169 don't want your contacts to become your enemies. Shit tier. just for
170 this.
171
172 # xmpp.jp
173
174 Recaptcha for registartion. their privacy policy don't say much. Low
175 tier.
176
177 # Summary
178
179 Use trashserver, snopyta or lqdn.