Project

General

Profile

Bug #8573

Hopefully replace Pidgin some day

Added by intrigeri over 4 years ago. Updated 7 months ago.

Status:
In Progress
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
01/07/2015
Due date:
% Done:

50%

Feature Branch:
Type of work:
Research
Starter:
Affected tool:
Instant Messaging

Description

For now, we're doing all easy things we can to make Pidgin safer in Tails (AppArmor confinement, shipping support for only a couple protocol), so the current situation is not that scary, but people I trust say it's riddled with security issues.

It would be good to have a long term plan to replace Pidgin with something safer, without losing the functionality we need.


Subtasks

Bug #8574: Test CoyIM in TailsResolved

Feature #8575: Wait for someone to write a GUI on top of xmpp-clientResolvedsycamoreone

Feature #8576: Ask for IRC support in xmpp-clientResolvedsycamoreone

Feature #8577: Evaluate Tor Messenger in the context of TailsResolved

Bug #11686: Replace Pidgin: refine blueprintConfirmed

Feature #15816: Can we stop including an IRC client by default?Confirmedintrigeri


Related issues

Related to Tails - Feature #6117: Audit Pidgin Confirmed
Related to Tails - Bug #11541: OMEMO support in Tails Confirmed 06/21/2016
Related to Tails - Feature #7868: Use gajim instead of pidgin (more secure OTR chat) Rejected 09/01/2014
Related to Tails - Feature #8173: Make Ricochet usable in Tails Rejected 10/25/2014
Related to Tails - Feature #11307: Make sure that anonymous XMPP logins work in Tails Confirmed 04/03/2016
Related to Tails - Bug #7453: Pidgin cannot find out the correct XMPP server to connect to, without SRV DNS lookups Confirmed 06/23/2014
Related to Tails - Bug #6347: Pidgin IRC Protocol responds to DCC SEND? Confirmed 10/08/2013

Associated revisions

Revision 5bc4fd05 (diff)
Added by anonym almost 2 years ago

Replace Pidgin blueprint: bring section about Tor Messenger up-to-date.

Refs: #8573, #8577

History

#1 Updated by sycamoreone over 4 years ago

I am already following the development around xmpp-client. If you are not keen on doing this yourself, feel free to assign this ticket, #8575, and #8576 to me. (Then somebody would need to brief me about what was discussed at 31c3.)

To be able to decide if a potential replacement is ready, we should also start a blueprint to list Tails' requirements. For example, is SASL authentication for IRC a requirement?

#2 Updated by intrigeri over 4 years ago

I am already following the development around xmpp-client. If you are not keen on doing this yourself, feel free to assign this ticket, #8575, and #8576 to me.

I'll happily do it!

(Then somebody would need to brief me about what was discussed at 31c3.)

These discussions are mostly captured in these tickets already, but don't hesitate to ask me and DrWhax for details privately if needed :)

To be able to decide if a potential replacement is ready, we should also start a blueprint to list Tails' requirements.

Agreed, and appreciated.

For example, is SASL authentication for IRC a requirement?

It's needed for several IRC networks that I find important to support, when connecting over Tor, so I would say yes.

#3 Updated by intrigeri over 4 years ago

Actually, anything related to xmpp-client is on #8574, so let's move the discussion there. And I've assigned that one to you, instead of this very one, assuming that's expressing your intent better.

#4 Updated by intrigeri over 4 years ago

  • Blueprint set to https://tails.boum.org/blueprint/replace_Pidgin/

#5 Updated by intrigeri over 3 years ago

#6 Updated by Dr_Whax about 3 years ago

  • Description updated (diff)
  • Assignee set to Dr_Whax
  • Target version set to 2018

#7 Updated by Dr_Whax about 3 years ago

  • Assignee deleted (Dr_Whax)

#8 Updated by sajolida about 3 years ago

  • Related to Bug #11541: OMEMO support in Tails added

#9 Updated by sajolida about 3 years ago

  • Related to Feature #7868: Use gajim instead of pidgin (more secure OTR chat) added

#10 Updated by intrigeri about 3 years ago

  • Target version deleted (2018)

#11 Updated by anonym almost 2 years ago

  • Status changed from Confirmed to In Progress

#12 Updated by u over 1 year ago

Added some info to the blueprint.

Next steps with the most likely candidates:

  • try coyim
  • help to find somebody to audit coyim
  • get Tor Messenger into Debian
  • try dino-im

#13 Updated by u over 1 year ago

#14 Updated by intrigeri over 1 year ago

  • Related to Feature #11307: Make sure that anonymous XMPP logins work in Tails added

#15 Updated by jvoisin over 1 year ago

I'm currently using Dino to replace Pidgin, and so far so good. The only missing feature are OTR (but there is OMEMO instead) and a systray icon. It's even translated in several languages :)

CoyIM on the other hand doesn't support rooms very well for now, and likely won't in a near future, as I was told by olabini.

#16 Updated by u about 1 year ago

  • Related to Bug #7453: Pidgin cannot find out the correct XMPP server to connect to, without SRV DNS lookups added

#17 Updated by u about 1 year ago

  • Related to Bug #6347: Pidgin IRC Protocol responds to DCC SEND? added

#18 Updated by intrigeri about 1 year ago

  • Description updated (diff)
  • Type of work changed from Wait to Research

#19 Updated by andrew.mcglashan 7 months ago

intrigeri wrote:

For now, we're doing all easy things we can to make Pidgin safer in Tails (AppArmor confinement, shipping support for only a couple protocol), so the current situation is not that scary, but people I trust say it's riddled with security issues.

It would be good to have a long term plan to replace Pidgin with something safer, without losing the functionality we need.

team: drwhax, sycamoreone

You can easily add OMEMO support to Pidgin. Here are some links that got my Pidgin setup working perfectly well:

https://github.com/gkdr/lurch
https://github.com/gkdr/carbons
https://app.assembla.com/spaces/pidgin-xmpp-receipts/git/source

Please have a look at those and reconsider keeping Pidgin, I think it is the best client too for a desktop by far.

#20 Updated by intrigeri 7 months ago

You can easily add OMEMO support to Pidgin. Here are some links that got my Pidgin setup working perfectly well:

https://github.com/gkdr/lurch
https://github.com/gkdr/carbons
https://app.assembla.com/spaces/pidgin-xmpp-receipts/git/source

AFAICT none of these are in Debian, so for now, I'll take this "easily" with a grain of salt :)

#21 Updated by u 7 months ago

  • Description updated (diff)

Also available in: Atom PDF