Project

General

Profile

Bug #8573

Hopefully replace Pidgin some day

Added by intrigeri about 5 years ago. Updated about 1 year ago.

Status:
In Progress
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
01/07/2015
Due date:
% Done:

50%

Feature Branch:
Type of work:
Research
Starter:
Affected tool:
Instant Messaging

Description

For now, we're doing all easy things we can to make Pidgin safer in Tails (AppArmor confinement, shipping support for only a couple protocol), so the current situation is not that scary, but people I trust say it's riddled with security issues.

It would be good to have a long term plan to replace Pidgin with something safer, without losing the functionality we need.


Subtasks

Bug #8574: Test CoyIM in TailsResolved

Feature #8575: Wait for someone to write a GUI on top of xmpp-clientResolvedsycamoreone

Feature #8576: Ask for IRC support in xmpp-clientResolvedsycamoreone

Feature #8577: Evaluate Tor Messenger in the context of TailsResolved

Bug #11686: Replace Pidgin: refine blueprintConfirmed

Feature #15816: Can we stop including an IRC client by default?Confirmed


Related issues

Related to Tails - Feature #6117: Audit Pidgin Confirmed
Related to Tails - Bug #11541: OMEMO support in Tails Confirmed 06/21/2016
Related to Tails - Feature #7868: Use gajim instead of pidgin (more secure OTR chat) Rejected 09/01/2014
Related to Tails - Feature #8173: Make Ricochet usable in Tails Rejected 10/25/2014
Related to Tails - Feature #11307: Make sure that anonymous XMPP logins work in Tails Confirmed 04/03/2016
Related to Tails - Bug #7453: Pidgin cannot find out the correct XMPP server to connect to, without SRV DNS lookups Confirmed 06/23/2014
Related to Tails - Bug #6347: Pidgin IRC Protocol responds to DCC SEND? Confirmed 10/08/2013
Related to Tails - Feature #14567: Investigate mobile messaging applications Confirmed 01/18/2018
Related to Tails - Feature #17508: test xmpp in tails and its compatibility to mobile apps New

Associated revisions

Revision 5bc4fd05 (diff)
Added by anonym over 2 years ago

Replace Pidgin blueprint: bring section about Tor Messenger up-to-date.

Refs: #8573, #8577

History

#1 Updated by sycamoreone about 5 years ago

I am already following the development around xmpp-client. If you are not keen on doing this yourself, feel free to assign this ticket, #8575, and #8576 to me. (Then somebody would need to brief me about what was discussed at 31c3.)

To be able to decide if a potential replacement is ready, we should also start a blueprint to list Tails' requirements. For example, is SASL authentication for IRC a requirement?

#2 Updated by intrigeri about 5 years ago

I am already following the development around xmpp-client. If you are not keen on doing this yourself, feel free to assign this ticket, #8575, and #8576 to me.

I'll happily do it!

(Then somebody would need to brief me about what was discussed at 31c3.)

These discussions are mostly captured in these tickets already, but don't hesitate to ask me and DrWhax for details privately if needed :)

To be able to decide if a potential replacement is ready, we should also start a blueprint to list Tails' requirements.

Agreed, and appreciated.

For example, is SASL authentication for IRC a requirement?

It's needed for several IRC networks that I find important to support, when connecting over Tor, so I would say yes.

#3 Updated by intrigeri about 5 years ago

Actually, anything related to xmpp-client is on #8574, so let's move the discussion there. And I've assigned that one to you, instead of this very one, assuming that's expressing your intent better.

#4 Updated by intrigeri about 5 years ago

  • Blueprint set to https://tails.boum.org/blueprint/replace_Pidgin/

#5 Updated by intrigeri about 4 years ago

#6 Updated by Dr_Whax over 3 years ago

  • Description updated (diff)
  • Assignee set to Dr_Whax
  • Target version set to 2018

#7 Updated by Dr_Whax over 3 years ago

  • Assignee deleted (Dr_Whax)

#8 Updated by sajolida over 3 years ago

  • Related to Bug #11541: OMEMO support in Tails added

#9 Updated by sajolida over 3 years ago

  • Related to Feature #7868: Use gajim instead of pidgin (more secure OTR chat) added

#10 Updated by intrigeri over 3 years ago

  • Target version deleted (2018)

#11 Updated by anonym over 2 years ago

  • Status changed from Confirmed to In Progress

#12 Updated by Anonymous about 2 years ago

Added some info to the blueprint.

Next steps with the most likely candidates:

  • try coyim
  • help to find somebody to audit coyim
  • get Tor Messenger into Debian
  • try dino-im

#13 Updated by Anonymous about 2 years ago

#14 Updated by intrigeri about 2 years ago

  • Related to Feature #11307: Make sure that anonymous XMPP logins work in Tails added

#15 Updated by jvoisin almost 2 years ago

I'm currently using Dino to replace Pidgin, and so far so good. The only missing feature are OTR (but there is OMEMO instead) and a systray icon. It's even translated in several languages :)

CoyIM on the other hand doesn't support rooms very well for now, and likely won't in a near future, as I was told by olabini.

#16 Updated by Anonymous over 1 year ago

  • Related to Bug #7453: Pidgin cannot find out the correct XMPP server to connect to, without SRV DNS lookups added

#17 Updated by Anonymous over 1 year ago

  • Related to Bug #6347: Pidgin IRC Protocol responds to DCC SEND? added

#18 Updated by intrigeri over 1 year ago

  • Description updated (diff)
  • Type of work changed from Wait to Research

#19 Updated by andrew.mcglashan about 1 year ago

intrigeri wrote:

For now, we're doing all easy things we can to make Pidgin safer in Tails (AppArmor confinement, shipping support for only a couple protocol), so the current situation is not that scary, but people I trust say it's riddled with security issues.

It would be good to have a long term plan to replace Pidgin with something safer, without losing the functionality we need.

team: drwhax, sycamoreone

You can easily add OMEMO support to Pidgin. Here are some links that got my Pidgin setup working perfectly well:

https://github.com/gkdr/lurch
https://github.com/gkdr/carbons
https://app.assembla.com/spaces/pidgin-xmpp-receipts/git/source

Please have a look at those and reconsider keeping Pidgin, I think it is the best client too for a desktop by far.

#20 Updated by intrigeri about 1 year ago

You can easily add OMEMO support to Pidgin. Here are some links that got my Pidgin setup working perfectly well:

https://github.com/gkdr/lurch
https://github.com/gkdr/carbons
https://app.assembla.com/spaces/pidgin-xmpp-receipts/git/source

AFAICT none of these are in Debian, so for now, I'll take this "easily" with a grain of salt :)

#21 Updated by Anonymous about 1 year ago

  • Description updated (diff)

#22 Updated by intrigeri about 1 month ago

  • Related to Feature #14567: Investigate mobile messaging applications added

#23 Updated by syster about 1 month ago

  • Related to Feature #17508: test xmpp in tails and its compatibility to mobile apps added

Also available in: Atom PDF