[Kira_Yamato]

Bumping this!

[CorpTax]

The difference between XMPP on the onions is that all incoming traffic comes from Tor exit nodes, and Prosody itself only sees this traffic as 127.0.01.

Hidden services, like yours for example, don't use exit nodes. Exit nodes is used only when you leaving tor network. In this case xmpp server is inside the tor network, so no exit nodes used. And that's good.

I dare to find anything more secure than the setup of my prosody server.

Secure or more anonymous/private ? All decentralized solutions is more anonymous and private then xmpp. Like these.
https://tox.chat/
https://www.ricochetrefresh.net/
https://cwtch.im/
https://getsession.org/

It's cool that you setup this server, but i think xmpp is a thing of the past.

There's pro's an con's to all of them but xmpp is definitely not a thing of the past there's a lot of people that still use xmpp + it's plugin options for client side encryption are more appealing than a service 'claiming' they are encrypting in transit while they possibly could hold the private key an decrypt traffic. The fact is a lot of people stayed away from xmpp because they couldn't figure out how to use it an went for services that are more plug an play but a protocol as old as xmpp that's stood the test of time I wouldn't be so quick to write off.

Thanks @Kira_Yamato for setting up the server it's a good idea but there's a lot of users that can't get past connecting to the server that just don't understand problems with something like telegram.

[Kira_Yamato]

The difference between XMPP on the onions is that all incoming traffic comes from Tor exit nodes, and Prosody itself only sees this traffic as 127.0.01.

Hidden services, like yours for example, don't use exit nodes. Exit nodes is used only when you leaving tor network. In this case xmpp server is inside the tor network, so no exit nodes used. And that's good.

I dare to find anything more secure than the setup of my prosody server.

Secure or more anonymous/private ? All decentralized solutions is more anonymous and private then xmpp. Like these.
https://tox.chat/
https://www.ricochetrefresh.net/
https://cwtch.im/
https://getsession.org/

It's cool that you setup this server, but i think xmpp is a thing of the past.

There's pro's an con's to all of them but xmpp is definitely not a thing of the past there's a lot of people that still use xmpp + it's plugin options for client side encryption are more appealing than a service 'claiming' they are encrypting in transit while they possibly could hold the private key an decrypt traffic. The fact is a lot of people stayed away from xmpp because they couldn't figure out how to use it an went for services that are more plug an play but a protocol as old as xmpp that's stood the test of time I wouldn't be so quick to write off.

Thanks @Kira_Yamato for setting up the server it's a good idea but there's a lot of users that can't get past connecting to the server that just don't understand problems with something like telegram.

You are welcome brother, this is just a fun side project of mine as I use this server with several of my friends. Anyone who understands how it works is free to make use of it.

[Kira_Yamato]

BUMPING this

Everything is allowed on the XMPP server, I don't care what you do as long you make sure you use OMEMO (E2EE) so you wont have to trust the server admin .

The following is included with this configured server:

- Nobody knows your real IP address since everything is routed through the Tor network, even the server admin won't know anything.
- Nobody can read your messages or file transfers since everything is END 2 END encrypted through OMEMO (Signal fork).
- No identifying information is required to make an account unlike majority of instant messengers, you make up a username and give it a password. That's it.
- Private group chats can also be encrypted with OMEMO, all users within the group need to turn on their OMEMO encryption and their fingerprints will be verified. So you have a private group chat which is E2EE, the server admin can never read its content unlike telegram group chats per example.

[Kira_Yamato]

BUMPing this, its free people!

[Array]

Hello everyone, 

I hosted a free XMPP server for everyone to join, the server is hosted as a hidden service and only accepts Tor incoming and outgoing traffic. 

- Server is hosted as hidden service
- End 2 End encryption supported with OMEMO (Gajim for desktop and Conversations or Blabber for android phone). 
- Messages are archived for 2 days and it will be removed from the server, just make sure you use OMEMO encryption and everything is confident. 
- XMPP doesn't require any identification.
- No email and no number needed, just sign up. 
- No chances of IP leaks since the server doesn't allow non-Tor connections. 
- Private group chat END 2 END encryption supported through OMEMO
- For feedback or questions please ask in this thread. 

Domain of the XMPP server: 

6lpsq3jx46rms3bk2rmcgpmfx26n6pis6kbxgqlzod6x52wz7azhuvqd.onion


Accounts can be made easily through Gajim (make sure you have Tor browser running and are listening on 127.0.0.1 port 9150)

Or use Conversations in combination with either Orbot or Invizible Pro.

My contact on the XMPP server for questions or feedback:

kira@6lpsq3jx46rms3bk2rmcgpmfx26n6pis6kbxgqlzod6x52wz7azhuvqd.onion

thanks for sharing, won't use but im sure someone will appreciate it

[Kira_Yamato]

Why would i trust you and use it?

You dont have to trust me. The client that you use is totally independed from the server that is hosted, in this setup I don't own the signing keys of the XMPP app that you would use, so chain-supply/rogue attacks are impossible! The server entity is independed from the client entity. Also you use End 2 End encryption, so even if the server host (me in this case) wants to peek inside your content, it's impossible. OMEMO is audited and whidespread used for privacy. Also evcerything is routed through the Tor network which is an added layer of anonymity.

[Kira_Yamato]

Why would i trust you and use it?

You dont have to trust me. The client that you use is totally independed from the server that is hosted, in this setup I don't own the signing keys of the XMPP app that you would use, so chain-supply/rogue attacks are impossible! The server entity is independed from the client entity. Also you use End 2 End encryption, so even if the server host (me in this case) wants to peek inside your content, it's impossible. OMEMO is audited and whidespread used for privacy. Also evcerything is routed through the Tor network which is an added layer of anonymity.

Ok, thank you for these details.

With pleasure bro.