CC-BY-SA 4.0

1. XMPP/Jabber Chats
Tong Hui (@tonghuix) <tonghuix@gmail.com>

2. Beijinglug.org
What is XMPP / Jabber
●
A communications
protocol for
message-oriented
middleware based
on XML

3. Beijinglug.org
What XMPP can do?
●
Instant Messaging
●
Collaborative Software
●
Game Server
●
System Control
●
Push Notification Service
●
PubSub Service

4. Beijinglug.org

5. Beijinglug.org
XMPP Basics
●
Addressing
JabberID: username@domain/resource
E.g. tonghuix@jabber.gnome.org
●
IQ
get/set/result/error
●
Presence
●
Roster
●
Message

6. Beijinglug.org
XMPP Strength
●
Open Standard (RFC)
●
Proven
●
Extensible
●
Community
●
Scalable
●
Channel encryption (TLS)
●
Authentication (Digest, SASL)

7. Beijinglug.org

8. Beijinglug.org
XMPP Applications
●
Gtalk
●
Facebook Chat
●
WhatsApp
●
MSN / Twitter /Google App Engine
●
新浪微博私信 (Weibo PM)
●
米聊，陌陌
●
人人网，网易泡泡，盛大 KiKi
●
腾讯手机管家
●
如意通， IMO

9. Beijinglug.org
XMPP Weakness
●
Verbose (inherited from xml)
●
Stateful (XML)
●
Multi-clients, but lacks sync
●
Unreliable Message (No ack for msg)
●
Inefficient for binary data transfer (XML)

10. Beijinglug.org
XMPP Extention
●
Jingle Protocol: Audio/Video and Media
Transfer, SIP-like
●
File Proxy: File Transfer
●
MUC (Multiple User Chats): Conference Room
……

11. Beijinglug.org
XMPP Implementations
●
Servers
Jabberd/Jabberd2 (C)
Prosody(Lua)
Ejabber( Erlang)
Openfire (Java)
Tigase (Java)

12. Beijinglug.org
XMPP Implementations
●
Desktop Clients
– Pidgin
– Empathy
– Gajim
– Miranda IM
– Adium(Mac OS X only)
– Psi / Psi+
– Mcabber(CLI)
– ……

13. Beijinglug.org
Web Clients
●
Jappix
●
Convers.js
●
JSXC
●
Crytocat
●
Candy
●
Lets-chat

14. Beijinglug.org
Mobile Clients
●
ChatSecure (Android / iOS)
●
Conversations
(Android, Free of Charge in F-Droid)
●
Xabber (Android)
●
Beem (Android)

15. Beijinglug.org
Message Encryption
●
OTR (Off The Record)
●
OpenPGP

16. Beijinglug.org
OTR (Off The Records)
●
OTR uses a combination of AES symmetric-key
algorithm with 128 bits key length, the Diffie–
Hellman key exchange with 1536 bits group
size, and the SHA-1 hash function.
●
In addition to authentication and encryption,
OTR provides forward secrecy and malleable
encryption.

17. Beijinglug.org
Clients which supports OTR
●
Psi+
●
Kopete (KDE)
●
MCabber(CLI)
●
BitBee
●
Jatsi
●
ChatSecure (Andrord)
●
Conversations (Android)
●
Xabber(Android)

18. Beijinglug.org
Clients which ships OTR Plugins
●
Gajim
●
Irssi (CLI)
●
WeeChat (CLI)
●
Xchat
●
Miranda IM (Win)
●
Pidgin
●
Psi
●
Tkabber

19. Beijinglug.org
Workshop - Let's Chat!
●
Install a Client (Desktop, Web or Mobile)
●
Find a public server, via https://xmpp.net
●
Regester Online via Client
●
Add a friend nearby
●
Let's Chat !
●
Start OTR encrytion chats

20. Thank you !
My Jabber ID: tonghuix@jabber.gnome.org