Viewing profile — MattJ100

You can do big data in SQLite. Concurrent writes, sure, I'd recommend something else. If you think the majority of systems require massively concurrent writes, I think you need to …

It's a reference to Eternal September, the name applied to the cultural shift of the internet as the general public started gaining access to it en masse in the 90s. Sloptember is …

Each commit should build and pass tests, yes. When I say "partial commits", I don't mean that the commits are arbitrary - each commit should be as small as possible to implement a …

Yes, Mercurial has a very advanced history editing system via "evolution": https://wiki.mercurial-scm.org/ChangesetEvolution A good way of thinking about it is that every commit is…

To be clear, Mercurial does not have a staging area, but it does have allow selective commits (and selective uncommits) via prompt-based or interactive UI selection of hunks. Disag…

We see this in our open-source community. We've had a community channel for over two decades, where community members help newcomers and each other solve problems and answer questi…

URL parsing/normalisation/escaping/unescaping is a minefield. There are many edge cases where every implementation does things differently. This is a perfect example. It gets worse…

Yes, it is. The worst offenders hammer us (and others) with thousands upon thousands of requests, and each request uses unique IP addresses making all per-IP limits useless. We imp…

Yes, definitely. To me, the idea of a chat server that doesn't federate is as absurd as setting up an email server that doesn't federate. I understand that today people know more c…

You're welcome! I'm still experimenting with the messaging on the Snikket website. However my general approach with the site was to pitch Snikket to people who don't know what XMPP…

Yeah, iOS is definitely a weaker spot and we're aware of it. Monal is currently working on an overhaul of their UI (they have a grant allocated for it: https://nlnet.nl/project/Mon…

Be aware that this post has known issues that the author is not interested in fixing. In their own words (in response to clarifications by one of the OMEMO folk): "I'll make an edi…

I'm the founder of both the Prosody and Snikket projects. Sorry about triggering alarms :) I can try to explain... Prosody is a popular choice of XMPP server software. It's used fo…

As the founder of both projects, explaining the difference between the two projects is roughly 20% of my working day (okay, not quite 20% but sometimes it feels that way). Your des…

You're not wrong. PKI has better protections against MITM, dialback has better protections against certificate leaks/misissuance. I think the ideal approach would be combining both…

There is a lot of confusion caused by overlapping terminology in this issue. By "client certificates" I mean (and generally take most others in this thread to mean) certificates wh…

Yeah, the resistance is outside the XMPP community. However we have a long history of working with internet standards, and it's disappointing to now be in an era where "the interne…

They weren't "HTTPS certificates" originally, just certificates. They may be "HTTPS certificates" today if you listen to some people. However there was never a line drawn where one…

Firstly, nobody is actually calling for authentication using client certificates. We use "normal" server certificates and validate the usual way, the only difference is that such a…

Of these, (1) and (2) are already implemented in XMPP. (1) just isn't that widely deployed due to low DNSSEC adoption and setup complexity, but there is a push to get server operat…

Yes, definitely. Prosody supports DANE, but DNSSEC deployment continues to be an issue when talking about the public XMPP network at large. Ironically the .im TLD our own site is o…

Sorry, it's late here and I guess I didn't word it well. Dialback (these days) always runs over a TLS-encrypted connection, as all servers enforce TLS. The next question is how to …

> Is there a reason why dialback isn't the answer? There are some advantages to using TLS for authentication as well as encryption, which is already a standard across the internet.…

There might be some confusion here, as there is no refusal at all. As stated in the blog post, we (Prosody) have been accepting (only) serverAuth certificates for a long time. Howe…

Thanks! I didn't intentionally write this for a broader audience (I didn't expect to see it while casually opening HN!). Our user base is quite diverse, so I try to find the balanc…