On 21/06/13 19:22, Brian May wrote:
> On 21/06/2013 6:51 PM, "Ben Finney" <ben+freesoftw...@benfinney.id.au>
> wrote:
>> I wasn't specific enough here: I mean “which services are good to
>> recommend”, i.e. recommendations to give to people who aren't going to
>> set up their own server softweare but want an existing, hosted service
>> where they can get an XMPP account.
> 
> I use jabber.org.au
> 
> See https://jabber.org.au/ from memory.

I run my own XMPP server (ejabber), but I have people on my roster that
use the DuckDuckGo XMPP servers at dukgo.com.

Setup instructions here:
https://dukgo.com/blog/using-pidgin-with-xmpp-jabber

Information about the privacy policy in place (which appears to be one
of the best) down the bottom of this post:
https://dukgo.com/blog/xmpp-services-at-duckduckgo

I feel that having a well thought-out privacy policy is very important,
particularly for a communications service - and it's something that
jabber.org.au seems to lack. There are two concerns I have with
DuckDuckGo's XMPP offering however:

1. DuckDuckGo is a US company. If they aren't logging anything and you
trust the encryption in place, that perhaps may not be too concerning.

2. The DuckDuckGo XMPP service uses a self-signed certificate, and no
fingerprint is provided. This would seem to introduce some risk of a man
in the middle attack.

Due to concern 2, I find DuckDuckGo currently difficult to recommend
(but I don't know anything better to suggest). Hopefully they sort it
out soon.

-Adam


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Free-software-melb mailing list
Free-software-melb@lists.softwarefreedom.com.au
http://lists.softwarefreedom.com.au/cgi-bin/mailman/listinfo/free-software-melb


Free Software Melbourne home page: http://www.freesoftware.asn.au/melb/

Reply via email to