Changes

Page history
Adjust for ikiwiki → GitLab wiki authored by intrigeri's avatar intrigeri
Hide whitespace changes
Inline Side-by-side
replace_Pidgin.md
View page @ a5d53a93
Corresponding ticket: [[!tails_ticket 8573]] Corresponding ticket: tails/tails#8573
We want to replace Pidgin with a more secure IM client. We want to replace Pidgin with a more secure IM client.
This document lists our requirements and candidate clients, along with their pros and cons. This document lists our requirements and candidate clients, along with their pros and cons.
[[!toc levels=3]]
[[_TOC_]]
# Requirements # Requirements
...@@ -53,8 +55,8 @@ Ideally, some usability study for the OMEMO user interface has been done. ...@@ -53,8 +55,8 @@ Ideally, some usability study for the OMEMO user interface has been done.
Resources: Resources:
- [clients support](https://omemo.top/) - [clients support](https://omemo.top/)
- [[!tails_gitlab 11541]] - [11541](https://gitlab.tails.boum.org/11541)
- [[!wikipedia OMEMO]] - [OMEMO](https://en.wikipedia.org/wiki/OMEMO)
- [XEP-0384](http://xmpp.org/extensions/xep-0384.html) - [XEP-0384](http://xmpp.org/extensions/xep-0384.html)
### Support for OTR ### Support for OTR
...@@ -92,7 +94,7 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte ...@@ -92,7 +94,7 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte
* supports XMPP, OMEMO and OpenPGP; OTR support is * supports XMPP, OMEMO and OpenPGP; OTR support is
[not high on the todo list](https://github.com/dino/dino/issues/97) [not high on the todo list](https://github.com/dino/dino/issues/97)
* Supports Tor, works in Tails. [Wiki page on Dino with Tor](https://github.com/dino/dino/wiki/Tor) * Supports Tor, works in Tails. [Wiki page on Dino with Tor](https://github.com/dino/dino/wiki/Tor)
* is [[!debpts dino-im desc="in Debian"]] Buster * is [in Debian](https://tracker.debian.org/pkg/dino%2Dim) Buster
* the Debian maintainer wants to add an AppArmor profile and got in * the Debian maintainer wants to add an AppArmor profile and got in
touch with intrigeri about it touch with intrigeri about it
* Translated into 25+ languages * Translated into 25+ languages
...@@ -117,11 +119,11 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte ...@@ -117,11 +119,11 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte
- In 2019, [Multiple protocol implementation - In 2019, [Multiple protocol implementation
errors](https://gultsch.de/dino_multiple.html) were discovered in Dino: errors](https://gultsch.de/dino_multiple.html) were discovered in Dino:
- [[!cve CVE-2019-16237]]: an attacker can send messages in the name of someone else - [CVE-2019-16237](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE%2D2019%2D16237): an attacker can send messages in the name of someone else
(previously found in other XMPP clients: CVE-2017-5589+) (previously found in other XMPP clients: CVE-2017-5589+)
- [[!cve CVE-2019-16236]]: remote attackers can modify the roster (previously - [CVE-2019-16236](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE%2D2019%2D16236): remote attackers can modify the roster (previously
found in Gajim: CVE-2015-8688) found in Gajim: CVE-2015-8688)
- [[!cve CVE-2019-16235]]: does not properly check the source of a carbons message - [CVE-2019-16235](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE%2D2019%2D16235): does not properly check the source of a carbons message
As that document says, "When confronted with the fact that the same trivial As that document says, "When confronted with the fact that the same trivial
vulnerabilities have been discovered in multiple, independent clients one vulnerabilities have been discovered in multiple, independent clients one
...@@ -161,12 +163,12 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte ...@@ -161,12 +163,12 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte
- D-Bus capabilities: can be disabled? - D-Bus capabilities: can be disabled?
- Track record: - Track record:
- [[!cve CVE-2016-10376]]: allows being controlled by the XMPP server - [CVE-2016-10376](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE%2D2016%2D10376): allows being controlled by the XMPP server
- [[!cve CVE-2015-8688]]: remote attackers can modify the roster and intercept - [CVE-2015-8688](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE%2D2015%2D8688): remote attackers can modify the roster and intercept
messages messages
- [[!cve CVE-2012-5524]]: custom SSL certificate verification callback - [CVE-2012-5524](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE%2D2012%2D5524): custom SSL certificate verification callback
accepted CA-signed certificates for any domain. accepted CA-signed certificates for any domain.
- [[!cve CVE-2012-2085]] aka. https://dev.gajim.org/gajim/gajim/-/issues/7031: - [CVE-2012-2085](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE%2D2012%2D2085) aka. https://dev.gajim.org/gajim/gajim/-/issues/7031:
remote code execution by building command lines out of untrusted input. remote code execution by building command lines out of untrusted input.
- Gajim ships with a plugin called "plugin installer" which allows a user to - Gajim ships with a plugin called "plugin installer" which allows a user to
...@@ -212,7 +214,7 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte ...@@ -212,7 +214,7 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte
* Supports importing accounts from Pidgin. * Supports importing accounts from Pidgin.
* No logging, no clickable links. * No logging, no clickable links.
* Not audited. * Not audited.
* Test results in Tails: [[!tails_ticket 8574]] * Test results in Tails: tails/tails#8574
* No OMEMO support. * No OMEMO support.
### Thunderbird ### Thunderbird
...@@ -221,7 +223,7 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte ...@@ -221,7 +223,7 @@ The client must support XMPP conference rooms [(XEP-0045)](https://xmpp.org/exte
pref: <https://wiki.mozilla.org/Thunderbird:OTR> pref: <https://wiki.mozilla.org/Thunderbird:OTR>
* No OMEMO support: <https://bugzilla.mozilla.org/show_bug.cgi?id=1237416> * No OMEMO support: <https://bugzilla.mozilla.org/show_bug.cgi?id=1237416>
### Tor Messenger ([[!tails_ticket 8577]]) ### Tor Messenger (tails/tails#8577)
Tor Messenger is no more: https://blog.torproject.org/sunsetting-tor-messenger Tor Messenger is no more: https://blog.torproject.org/sunsetting-tor-messenger
...@@ -235,7 +237,7 @@ Tor Messenger is no more: https://blog.torproject.org/sunsetting-tor-messenger ...@@ -235,7 +237,7 @@ Tor Messenger is no more: https://blog.torproject.org/sunsetting-tor-messenger
since we are looking for a "Pidgin replacement". since we are looking for a "Pidgin replacement".
* It has support for "temporary XMPP accounts" that require no * It has support for "temporary XMPP accounts" that require no
registration (no user input!) which would be useful for our support registration (no user input!) which would be useful for our support
channel (see [[!tails_ticket 11307]]). channel (see tails/tails#11307).
* Tor Messenger provides Linux packages but is not in Debian :( * Tor Messenger provides Linux packages but is not in Debian :(
* FWIW: Tor Messenger got 30K USD funding in 2017! * FWIW: Tor Messenger got 30K USD funding in 2017!
* FWIW: anonym has been happy using it exclusively for chatting since * FWIW: anonym has been happy using it exclusively for chatting since
...@@ -244,9 +246,10 @@ Tor Messenger is no more: https://blog.torproject.org/sunsetting-tor-messenger ...@@ -244,9 +246,10 @@ Tor Messenger is no more: https://blog.torproject.org/sunsetting-tor-messenger
and is meant to be and is meant to be
[replaced by future improvements in _Thunderbird_'s chat features](http://blog.queze.net/post/2017/10/18/Thunderbird-is-the-next-version-of-Instantbird) [replaced by future improvements in _Thunderbird_'s chat features](http://blog.queze.net/post/2017/10/18/Thunderbird-is-the-next-version-of-Instantbird)
(although _Thunderbird_'s future is unclear as well). To follow (although _Thunderbird_'s future is unclear as well). To follow
along, subscribe to the [[!mozbug 1409891 desc="meta tracking bug"]] along, subscribe to the [meta tracking bug](https://bugzilla.mozilla.org/show_bug.cgi?id=1409891)
and the ones it depends on. The _Tor Messenger_ developers and the ones it depends on. The _Tor Messenger_ developers
intend to intend to
[follow suit](https://lists.torproject.org/pipermail/tor-project/2017-October/001521.html) [follow suit](https://lists.torproject.org/pipermail/tor-project/2017-October/001521.html)
and create a _Tor Communicator_ bundle based on _Thunderbird_, that and create a _Tor Communicator_ bundle based on _Thunderbird_, that
would handle both email and chat. would handle both email and chat.