

The server can swap to a modified JS that exfiltrates the e2ee key and thus allows the server owner to decrypt the messages, or in more advanced encryption schemes add additional keys without you knowing and achieve the same thing.
Admin on the slrpnk.net Lemmy instance.
He/Him or what ever you feel like.
XMPP: povoq@slrpnk.net
Avatar is an image of a baby octopus.
The server can swap to a modified JS that exfiltrates the e2ee key and thus allows the server owner to decrypt the messages, or in more advanced encryption schemes add additional keys without you knowing and achieve the same thing.
Yes you can juryrig something like that with cookies, but it is highly fragile and browser based e2ee is basically a scam anyways as the server serving the website can always swap out the javascript that decrypts the messages.
This sounds a bit like you are falling for the popular game of EU-washing that many local politicians like to play, i.e. push for something at EU level and later claim there is nothing they could have done against it because it was decided by those up there in the EU.
In general the EU is far, far from being the “United states of Europe” and most of the controversial decisions are actually taken by national leaders circumventing the EU and its institutions like the EU parliament. The EU commission is largely just a bureaucratic organ to EU-wash the general neoliberal consensus of local politicians.
And from an anarchist perspective, it is IMHO preferable to have some far away aloof bureaucrats occupying themselves with some non-sense of little relevance and which you can largely ignore, than a local autocratic government that is breathing down your neck.
e2ee is not really compatible with what you want due to necessary key management, and once you drop that there are so many possible options for what you want that I don’t want to list them all here.
I don’t think an EU army is necessarily a bad thing. By itself it isn’t worse than a national army (low bar, I know), but disagreements between nations will make it hard to use for foreign intervention purposes and deep integration will make it hard for parts of it to be used against other parts of it.
And once you think about an EU army it becomes quite clear that cost savings possible by cooperating that way are much better that burning lots of borrowed money on multiple national white elephants like currently often the case.
/me notes the commenter’s home instance and concludes there is no point in arguing about this very biased take…
Movim does, for Libervia and Dino I am not 100% sure right now, but at least for Libervia the browser version should have it as it is really more of a general Webrtc browser feature than client specific.
Maybe it was based on the “lifetime” of their hamster 🤷
https://join-lemmy.org/docs/administration/configuration.html
You need to set it to proxy all images.
The currently common older implementation of e2ee in xmpp has the same issue with only the message body being encrypted. There are newer specs of OMEMO that have better metadata protection, but its adoption in xmpp clients has been very slow.
Prosody is more of a sandbox, with Snikket being a preconfigured version of it, but yes running Slidge will be a bit easier with a normal Prosody server.
Then you have not enabled to full image proxy (and note that it does not work retroactively). Here on our instance all the Nicole images were proxied correctly to protect the privacy of our members.
Today xmpp uses a distant relative of those original jingle specifications, which have been modernized to use Webrtc.
Lemmy does have a functional image proxy, but due to the storage and bandwidth requirements many larger instances have chosen to not enable it.
Xmpp is mostly used for private groups and 1:1 chat, so more of a WhatsApp than a Discord replacement.
But you can find some public channels here: https://search.jabber.network/
The issues you mentioned have been fixed, and XML was never an issue 😅
Jitsi-meet is already using xmpp under the hood.
But there are some efforts to add multi-user video calls to full xmpp clients as well. Dino can already do it for a while, and Movim and Libervia recently added experimental support.
Its not quite a full Discord replacement, but for private groups it works quite well.
Why would you down-grade from Snikket to Matrix?
If you want to skill up a bit add a Slidge.im gateway to your Snikket xmpp server to access Matrix (and Discord etc.) from there.
Jitsi-meet does that. Easy to install as well.
Yes, in theory, but in praxis no because self-hosting the sync server alone still depends on the centralized auth server from Mozilla, and self-hosting that as well is possible but complicated. It’s sadly a mess, and you might be better off not using Firefox sync at all.
As for your other question, depends on the specific addon, but usually no.
The cheapest way would be to buy a domain from OVH and use their free offer of a 5gb single email address that is included with each domain.
Seems like a Github sponsors promotion website. Why waste money by using a Microsoft owned middle man, when better projects like LiberaPay exist?