Re: [Operators] google abandoning XMPP??

2013-05-23 Thread Peter Schwindt
Am 22.05.13 21:11, schrieb Peter Saint-Andre: Well, xmpp has moved alot since 2005. caps, pubsub, pep, carbons, s2s-tls, compression, jingle... gtalk hasn't. So breaking up was a reasonable thing to do. There's a song in there somewhere. ;-) 50 ways to leave your lover? ;-)

[Operators] Spam Registrations

2013-05-23 Thread Alex Hanselka
Heya! Do you guys have any tips for spam registrations for open servers? I'm running one that eventually I'll add back to the list on xmpp.net but before I do I wanted some tips on this :) Thanks for any insight! Alex

[Operators] Public XMPP service: [creep.im]

2013-05-23 Thread Thwarth Wrhalthssen
Please add my public XMPP service to the list at xmpp.net. The information is as follows: * *domain*: [creep.im] * *website*: [http:/creep.im] * *year launched*: [2012] * *country*: [Russia] * *latitude*: [55.7517° N] * *longitude*: [37.6178° E] * *CA*:

Re: [Operators] spam resistance (was: Re: google abandoning XMPP??)

2013-05-23 Thread Dave Cridland
On Thu, May 23, 2013 at 12:35 AM, Justin Uberti jube...@google.com wrote: That seems like an overly cynical assessment of the situation. Speaking as an individual, it is sad that spammers were more willing to adopt XMPP than other IM networks, but so it goes. I'm not sure sufficient

[Operators] Post-google TLS on s2s connections

2013-05-23 Thread Jonas Wielicki
Hi all, It's been discussend and I'm keen to find out about authenticated and encrypted s2s. So I wonder what, if any, the current “standards” or suggestions on this one are. I'm a fan of CACert, and I'd like to stick for that. How's the reputation of CACert in the XMPP community? I believe I

Re: [Operators] spam resistance

2013-05-23 Thread Peter Saint-Andre
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/23/13 3:20 AM, Dave Cridland wrote: Google's was exasperated Exacerbated? But our Google friends were probably exasperated, too. not by simply allowing federation, but by allowing largely unauthenticated federation, making it by far the

Re: [Operators] Spam Registrations

2013-05-23 Thread Peter Saint-Andre
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/23/13 1:39 AM, Alex Hanselka wrote: Heya! Do you guys have any tips for spam registrations for open servers? I'm running one that eventually I'll add back to the list on xmpp.net but before I do I wanted some tips on this :) Thanks for

Re: [Operators] Spam Registrations

2013-05-23 Thread Kevin Smith
On Thu, May 23, 2013 at 8:39 AM, Alex Hanselka a...@darkdna.net wrote: Do you guys have any tips for spam registrations for open servers? I'm running one that eventually I'll add back to the list on xmpp.net but before I do I wanted some tips on this :) The best advice I can give is not to

Re: [Operators] Spam Registrations

2013-05-23 Thread Peter Saint-Andre
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/23/13 9:22 AM, Kevin Smith wrote: On Thu, May 23, 2013 at 8:39 AM, Alex Hanselka a...@darkdna.net wrote: Do you guys have any tips for spam registrations for open servers? I'm running one that eventually I'll add back to the list on xmpp.net

Re: [Operators] Spam Registrations

2013-05-23 Thread Peter Saint-Andre
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/23/13 9:28 AM, Jonas Wielicki wrote: I know that this proposal is kind of dangerous as it requires introspection of the users messages. But how about this: After registration, the users is put on a surveillance list, for like a few days

Re: [Operators] Spam Registrations

2013-05-23 Thread Kevin Smith
On Thu, May 23, 2013 at 4:28 PM, Jonas Wielicki xmpp-operat...@sotecware.net wrote: I know that this proposal is kind of dangerous as it requires introspection of the users messages. But how about this: After registration, the users is put on a surveillance list, for like a few days or weeks.

Re: [Operators] Post-google TLS on s2s connections

2013-05-23 Thread Olle E. Johansson
23 maj 2013 kl. 17:06 skrev Jonas Wielicki xmpp-operat...@sotecware.net: Hi all, It's been discussend and I'm keen to find out about authenticated and encrypted s2s. So I wonder what, if any, the current “standards” or suggestions on this one are. I'm a fan of CACert, and I'd like to

Re: [Operators] Spam Registrations

2013-05-23 Thread Dave Cridland
On Thu, May 23, 2013 at 4:36 PM, Kevin Smith ke...@kismith.co.uk wrote: There are also likely options along these lines that involve less privacy invasion than operators manually examining the accounts. A captcha for every subscription request? Only one outstanding (not reciprocated) roster

Re: [Operators] Spam Registrations

2013-05-23 Thread Maxim Ignatenko
On 23 May 2013 11:15, Peter Saint-Andre stpe...@stpeter.im wrote: At jabber.org, we turned off in-band registration and forced all users to register via https://register.jabber.org/ with CAPTCHA required. That did not really prevent spam registrations (at one point we had over 10,000 users

Re: [Operators] Post-google TLS on s2s connections

2013-05-23 Thread Philipp Hancke
Am 23.05.2013 17:38, schrieb Olle E. Johansson: Now, with old SSL/TLS the server requiring a client cert had to say I only accept client certs from these CA's. With TLS 1.x something this was removed, which opens up a lot of new possibilities for self-signed certs verified by other means, like

Re: [Operators] spam resistance (was: Re: google abandoning XMPP??)

2013-05-23 Thread Matthew Wild
On 23 May 2013 23:50, Justin Uberti jube...@google.com wrote: On Thu, May 23, 2013 at 2:20 AM, Dave Cridland d...@cridland.net wrote: On Thu, May 23, 2013 at 12:35 AM, Justin Uberti jube...@google.com wrote: That seems like an overly cynical assessment of the situation. Speaking as an

Re: [Operators] spam resistance

2013-05-23 Thread Peter Saint-Andre
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 5/23/13 4:50 PM, Justin Uberti wrote: On Thu, May 23, 2013 at 2:20 AM, Dave Cridland d...@cridland.net mailto:d...@cridland.net wrote: On Thu, May 23, 2013 at 12:35 AM, Justin Uberti jube...@google.com mailto:jube...@google.com wrote: