frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

Open in hackernews

A month using XMPP (using Snikket) for every call and chat (2023)

https://neilzone.co.uk/2023/08/a-month-using-xmpp-using-snikket-for-every-call-and-chat/
118•ColinWright•15h ago

Comments

ColinWright•15h ago
Seen here:

https://mathstodon.xyz/@neil@mastodon.neilzone.co.uk/1149374...

Usage continues two years later ...

riedel•15h ago
What are the actual security concerns when using OMEMO mentioned in the post? Most criticism I find is on implementations.
digianarchist•13h ago
https://omemo.top/

Wish there were more library implementations that clients could leverage.

DoctorOW•2h ago
Saw this linked elsewhere: https://soatok.blog/2024/08/04/against-xmppomemo/
xmpp-enjoyer•1h ago
For balance, see OMEMO Author Tim Henkes' response [1] to the blog, which was moderated.

This is linked from this blog post [2] where the author explains that they prefer XMPP, because it is not a silo.

[1] https://www.moparisthebest.com/tim-henkes-omemo-response.txt

[2] https://www.moparisthebest.com/against-silos-signal/

devrandoom•34m ago
That was a good read. The furry blog post read like a smear campaign. Extraordinary unprofessional.
wahern•15h ago
> Moving to XMPP - using prosody - worked really well for messaging, but the lack of real-time notifications on Sandra’s iPhone was sub-optimal

Were they using Monal on the iPhone? I use XMPP (Prosody) with some friends. Conversations.im works really well on Android, including push notifications. But the one iPhone user, using Monal, has said notifications don't work, and I don't know how to debug. The Monal website and commit log suggests they should be working. (macOS desktop Monal works fine for me, but it's using a normal live TCP stream to receive notifications, not cell network push notifications.)

AceJohnny2•15h ago
AIUI (but actual iOS developers can correct me), for Push Notifications to work on iPhones requires the system to route through the Apple-hosted Apple Push Notification (APN)

https://developer.apple.com/notifications/

This is fairly at odds with the goal of XMPP, where the device listens to the server. But of course that model doesn't really work when the device is sleeping most of the time (and I don't know how IP or TCP connections are handled in an LTE or 5G world, but I'm sure there's a consideration there).

All this to say: iOS is hostile to XMPP.

sssilver•14h ago
Another way to say it would be: XMPP is hostile to power efficiency.
zaik•14h ago
Conversations is one of the most battery efficient IM clients out there despite maintaining it's own TCP connection. This is possible because Conversations can tell the server to shut up unless it's important, which reduces radio usage a lot. This extension (CSI) is quite mature and found on most servers by now.
vetrom•13h ago
It's not that XMPP is hostile to power efficiency, its that Apple (and Google) gateway power-efficient edge triggering behind vendor-restricted cryptographic feature locks.

They have arguably correct reasons for doing this, but it's a false comparison to say that the software is inefficient when its just as efficient that anything else at that privilege level on the phone can do.

msgodel•13h ago
Nope. You can do push with XMPP just like everything else. The problem is that Apple demands open source client maintainers also personally maintain infrastructure with high availability to handle the push notifications rather than allowing them to delegate that to service operators where it belongs.

Apple is aggressively hostile to open source is the problem. IMO their behavior is why we don't have any nice open source chat apps like we did before the iPhone became popular.

tharant•11h ago
I can find no such requirement in the App Store Guidelines. Or is there anecdotal evidence somewhere?
msgodel•11h ago
They require push notifications to be signed with your certificate. You must maintain the infrastructure to do this yourself because you can't share the certificate with third parties (obviously) and downtime will mean no push notification delivery.

I have no idea if that's in the guidelines but that's how it works.

gsich•11h ago
Wrong. Apple (or Google) also use the same TCP based approach to maintain connectivity to allow notifications. No way is an extra connection responsible for bad power efficiency, with that small payloads. This is propaganda.
jauntywundrkind•13h ago
Apple's implementation of Web Push Protocol is also viciously inconsistent. Battery efficient yes but notifications just go missing or show up days after they were sent. Apple really has a way with keeping their own special native apps and their own services locked in.
MattJ100•7m ago
You're not wrong at all, but despite it all, XMPP has actually supported push notifications for years.

For various reasons it wasn't included "out of the box" in Prosody for a while and was maintained as a community plugin, but that's no longer the case with 13.0.x+ where it's bundled with Prosody and just works.

Monal is probably the most popular XMPP iOS app today.

WhyNotHugo•14h ago
Somewhat fuzzy on the details right now, but:

You need to enable a plugin in prosody for notifications to get routed via Apple’s servers. The plugin is disabled by default, but included in the default installation.

danieldk•15h ago
We were living in the future. Around ~2010 we could use Jabber/XMPP to chat with people on various community services, Google Talk, LiveJournal talk, etc. Besides great Linux clients, macOS had iChat which supported XMPP, etc.
icedchai•14h ago
I briefly worked on an XMPP client around that time. It cemented my opinion that the protocol was an absolute abomination.
dietrichepp•13h ago
Company I worked at back then used XMPP. There was something that you could paste into the chat that would make all of the Mac clients crash, and to fix it, someone with a different client would have to join the chat and type a lot of comments to flood the history.

I am not surprised to hear the protocol is an abomination.

kentrado•13h ago
Seems like a problem with the client rather than the protocol.
opan•9h ago
Yeah, there was a similar bug in HexChat and other (pango?) stuff some years back. I remember even though I was using irssi, it could crash my Termite window.
wink•56m ago
Kinda, but if there is only a limited subset of clients and everyone is basically on the one default per platform, it simply doesn't help.
jauntywundrkind•13h ago
That's quite unspecific and unhelpful.

Personally I find XMPP much makes sense. Sure it's this weird streaming XML thing, but there's a request/response pattern (IQ) inside that seems fine. I love how nicely it composes: accounts have a tree of nodes they can define for whatever content they want, which is a sensible & flexible base. Then there's pubsub, and ACL capability specs on top of that. Everything stacks relatively sensibly. The past decade has seen some good XMPP Enhancement Protocols (XEP) to create best practices & recommended feature sets.

It was such a small jump to create a full "everything app" atop XMPP baseline capabilities:

> Libervia [ed: nee Salut-a-Too] is a all-in-one tool to manage all your communications needs: instant messaging, (micro)blogging, file sharing, photo albums, events, forums, tasks, etc.

https://libervia.org/

It's unfortunate that the top rated comment is uncontestable blanket desparagement. Can we raise this from a low criticism to something respect-worthy?

icedchai•13h ago
I wasn't trying to be specific, just an opinion on what I experienced 10+ years ago. Others are welcome to work with the protocol and develop their own opinions.
hackyhacky•11h ago
If your opinion is based on concrete experience, you could help people understand your position by sharing the specific aspects of XMPP that you dislike. An opinion without evidence or reasoning is not a valuable contribution to the conversation.
tcfhgj•11h ago
My opinion: XMPP is too little like Matrix (e.g. decentralized rooms, people as verification targets, messages (incl. e2ee ones) easily synced to all sessions) while Matrix is in a sub optimal state due to the Element/Element X client split
icedchai•9h ago
It's been well over 10 years since I worked with, almost 15. I remember issues with keeping multiple devices in sync, syncing them back up when a user comes back online, especially with multiuser chats. I understand that is probably better now, with carbons and archiving XEPs.

In general, it felt like, XMPP has too many "optional" features. The core protocol is tiny, but everything you need and want to make it useful is optional.

wink•51m ago
Don't worry, every single one of these discussion is a dozen fanboys trying to convince us that our problems back then weren't real :/

(JFTR, was a relatively happy user amongst fellow nerds & family until everyone just stopped using it, and also usage on mobile was terrible on early smart phones and fixed much too late)

Bjartr•12h ago
In today's world of containerization and AI powered UI automation, perhaps a single user-facing client could be viable again, powered by hidden per-service clients under the hood. Where each services' UI state is continually monitored and interacted with by an AI directed by user interactions in the visible interface. That would be against the services' ToS probably, but it could work I think.

Who needs APIs when a computer can exploit the analog hole and use the same affordances as a human?

edoceo•12h ago
A "User-Agent" if you will.
zamadatix•12h ago
I don't think having a single user-facing client has ever really been held back by the technology. It's always the services being intentionally proprietary, intentionally breaking 3rd party clients, and ToSs making it risky to do.
wink•58m ago
I mean, different platforms exist just the same as back then. Windows, Linux, Android, iOS (and let's say some nerds will make it work on osx and the BSDs from the linux version).

That was a problem back then and it's a problem right now

oofbey•10h ago
Here's a specific complaint about XMPP, and possible explanation why nobody uses it any more. (I worked on a large-scale XMPP implementation back in the day.)

Presence. That's the colored dots indicating "is somebody online or not". The traffic needed to maintain presence scales by N^2, and in any large-scale implementation, the traffic to maintain presence data completely dominates anything useful.

Not to mention that for the past 15 years or so (ever since everybody has a connected cell-phone all the time) the whole idea of presence (am I online or not?) is either meaningless or just badly modeled.

So the result is a protocol which spends tons of bandwidth and battery maintaining metadata that is functionally useless. That's why the real world has run away from it as fast as possible.

eurleif•9h ago
>The traffic needed to maintain presence scales by N^2

Only true if we assume the average number of contacts scales linearly with the total number of users, right? But then, we could also assume that the average number of messages that a given user sends scales linearly with the total number of users, in which case the amount of traffic needed to transmit messages also scales by N^2.

A couple of easy fixes: cap the number of contacts at some large constant (as many services do), or just disable presence information altogether in your implementation. I'm skeptical that this played a major role in XMPP's lack of popularity, especially because e.g. WhatsApp and Facebook Messenger have presence information, and are still popular.

lmm•8h ago
XMPP missed the boat largely because it couldn't handle multiple clients correctly for years - the default is to deliver messages to one of your clients, you need an extension to do the sensible thing, and that extension spent years in bikeshed limbo right as smartphones were taking off and people started wanting to use the same messenger on their phone and computer at the same time. (I've heard that performance/battery issues from XML validation didn't help either)

Personal speculation but I blame the "everything is an extension" model - it was meant to reduce fragmentation and allow clients with different featuresets to interoperate, but in practice adding a new XEP seems to have all the downsides of making a change to a non-extension-based standard (you still have to get all the clients to agree) and none of the upsides.

jauntywundrkind•4h ago
This kind of checks out for me. But also, there have been decent protocols around this for a long time, that many clients & servers have implemented. From Multi-device in the excellent Modern XMPP:*

> XEP-0280: Message Carbons - for "live" synchronization of conversations between online devices. XEP-0313: Message Archive Management - for "catch-up" of messages that were exchanged while a device was offline

https://docs.modernxmpp.org/client/protocol/

The XEP-0313 spec dates back to 2012 which is less old than I expected, and that's only the 0.1. So, very fair point.

More generally, the above complaint was about the development experience of XMPP. I feel somewhat like complaining about XMPP being failed is well tread from a why consumers didnt adopt it view, that negative sentiment abounds & everyone is more than happy to cast blame as to why. I've seen a lot less complaints about the development experience, and felt like maybe there was some novel fruitful grounds that a more developer-centric view might have been able to open up.

Flowdalic•3h ago
> Personal speculation but I blame the "everything is an extension" model - it was meant to reduce fragmentation and allow clients with different featuresets to interoperate

I could be wrong, but that reads like you suggest that there is an alternative to the "extension model".

However, any solution where standardization and implementations are independent entities, and thereby experience a sufficient degree of freedom, will have a trajectory to a situation where you have a robust core specification and optional extensions.

Think about protocols like SMTP and DNS—each has a foundational core that’s been expanded upon by numerous optional features.

tcfhgj•2h ago
Optional features is something different than uncoordinated extensions which might conflict with each other.
Flowdalic•1h ago
I am not sure if I would phrase it that way.

(Seemingly) conflicting extensions are another consequence of the loosely coupling between standardization and implementations. In addition, the emergence of several functionally overlapping extensions is stimulated by the freely accessible standardization process.

Especially in the early phase of an extension, you want to encourage experimentation with different approaches. Early selection would be disadvantageous.

tcfhgj•19m ago
> Especially in the early phase of an extension, you want to encourage experimentation with different approaches. Early selection would be disadvantageous.

With any standard you can experiment what you want, nobody* even can prevent you from doing it no matter how inaccessible the standardization process is.

The standardization process comes into play when you think you have found a good solution, which should be adopted by THE standard respectively the ecosystem.

What matters is what the standard itself looks like, do you have a coherent specification which specifies the current way of doing things, including optional components?

Or do you have a set of independent ways of doing it, because the standardization process doesn't actually decide what is the correct way of doing something (e.g. managing a group chat)

*okay technically not correct. Law can e.g. decide making e2ee illegal technology and criminalize even playing around with it.

lmm•1h ago
> any solution where standardization and implementations are independent entities, and thereby experience a sufficient degree of freedom, will have a trajectory to a situation where you have a robust core specification and optional extensions.

You can call the kind of optionality that those kind of protocols have "extensions" if you want, but it's a lot more lightweight than the kind of extensibility that XMPP was designed around, which is the thing that I'm arguing did more harm than good.

oofbey•10h ago
XMPP fans are continuously baffled by why XMPP isn't used for _everything_. STILL! When will the world wake up and realize its simplicity and beauty?
bombela•14h ago
Yep it was great. I had one client per device. Could talk to everybody. I had a consistent UX. Sure sharing pictures and videos wasn't easy then. But also the pay to use features and dark patterns weren't an issue either.
c22•14h ago
This was the high point of megaupload and bittorrent, sharing photos, videos, and other large files was very easy!
bombela•14h ago
By easy I was thinking of when I merely need a long press on a button to record, compress and upload along side my message those days :)
FuriouslyAdrift•14h ago
Trillian and Gaim... (2000 and 1999)
johnisgood•11h ago
Now Gajim still exists and is maintained. :P
BGZq7•11h ago
Gajim is unrelated to Gaim. Gaim was renamed to Pidgin though, which still exists.
johnisgood•9h ago
Oh, yeah I knew Gaim became Pidgin, but I thought Gajim is a fork of Gaim as well, Gaim revived. Oops.
a96•3h ago
Being in any way associated with AIM/AOL was a bad thing, which they probably realized way too late.
zsiddique•11h ago
You could even use an XMPP client with HipChat for your business chat. Though, I'd argue XMPP was one of the factors that contributed to HipChat's demise (it wasn't the sole reason, but trying to scale presence via XMPP proved to be a nightmare).
oofbey•10h ago
Presence is the key problem. It scales badly - in terms of compute, bandwidth, and battery. And it's not actually useful. Lose lose. Solution: don't use XMPP.
opan•9h ago
Matrix had similar problems and most servers just disable presence. Can XMPP not do this?
SoftTalker•7h ago
Who GAF about presence. If the person answers, they're there.
mycall•8h ago
Matrix Bridges do something similar.
pigeons•7h ago
Those services, and more like facebook messenger used the XMPP protocol on both ends. Matrix bridges clumsily translate some of the feature of one protocol and display the chat on the other end.
donatj•6h ago
I miss the days when our best minds developed protocols instead of products. The last 15 years has been just the commodification and destruction of everything the previous generation has built.

I'm frankly surprised email has stood up as well as it has, even if it is nearly impossible to run your own email server these days.

In the mid-to-late teens IRC was making something of a comeback and then Slack EEE'd it.

rlpb•13h ago
I've been a big XMPP fan, having deployed it at customer sites more than a decade ago, running my own self-hosted service for friends and family, and so forth.

I'm disappointed that the experience is still not at feature parity with proprietary solutions. For example, Conversations.im is a great Android client for XMPP, but it still does not support live location.

There's so much potential to be better than the proprietary solutions, too, for example with OsmAnd integration (https://codeberg.org/iNPUTmice/Conversations/issues/11).

zie•13h ago
Interesting. I would have never thought of using XMPP to share location info like that.

I use Overland[0] and a custom server implementation that lets people I care about see where my phone is(and presumably me).

0: https://overland.p3k.app

daneel_w•12h ago
Daily user of XMPP as well since over a decade. I still call it Jabber out of habit. Prosody on server, Profanity on desktop (terminal), Monal on mobile.
johnisgood•11h ago
Prosody vs. ejabberd?
daneel_w•11h ago
I have no experience with ejabberd. As for Prosody, it does everything I/we want it to do, is very easy to configure and runs incredibly light - the host is a single-core virtual machine running OpenBSD on 256 MiB of RAM, and we've yet to face resource shortages.
johnisgood•9h ago
Sounds neat. I may self-host it then on my OpenBSD server with 512 MB RAM. I assume it supports OMEMO and all the modern extensions of XMPP, right?
nadof•1h ago
yes, prosody supports OMEMO.

Prosody works well with Conversations or Blabber on android

johnisgood•4h ago
Oh, I got another question and I cannot edit my comment. How many concurrently online people are there on the server that you can tell?
haunter•9h ago
Am I understanding right that they (two people) only talk with each other? Or at least they only talk with each other through XMPP?
rdm_blackhole•3h ago
I am making notes of this for if/when Chat Control gets the green light from the EU parliament.
nadof•1h ago
AFAIK services such as GMail, Facebook/Instagram Messenger, Skype, Snapchat, iCloud email and X-Box already apply chat control voluntarily:

https://www.esafety.gov.au/sites/default/files/2022-12/BOSE%...

rdm_blackhole•58m ago
I am aware. I am talking of Chat Control V2, which aims to introduce client side scanning to WhatsApp, Signal and IMessage.
grodriguez100•3h ago
Can’t help reading that as “Skynet” every time.
nadof•1h ago
> Moving to XMPP - using prosody - worked really well for messaging, but the lack of real-time notifications on Sandra’s iPhone was sub-optimal, and the lack of any notifications for incoming XMPP calls on her phone was really undesirable.

A note to android users: prosody real time notifications & calls work great combined with the "conversations" app as a client. You see "user is typing", you can transfer files/photo, video. And best of all, you can do audio video calls with adaptive quality (adjusts to your bandwidth) & auto reconnects.

nadof•1h ago
I've been using XMPP since about 5 years for family texting, file/video sharing, and video calling. It works great, and I would highly recommend it.

What works for us (all android) is Prosody + Conversations app (or Blabber is a free version). There are a few guides online for how to install & configure the prosody server. It's fairly non-technical.

Honestly, it works just as well as whatsapp - except there's actual privacy between users. Family messaging is a great use-case as everyone can be on the same server.

M8.7 earthquake in Western Pacific, tsunami warning issued

https://earthquake.usgs.gov/earthquakes/eventpage/us6000qw60/executive
688•jandrewrogers•9h ago•179 comments

Study mode

https://openai.com/index/chatgpt-study-mode/
940•meetpateltech•17h ago•668 comments

RIP Shunsaku Tamiya, the man who made plastic model kits a global obsession

https://JapaneseNostalgicCar.com/rip-shunsaku-tamiya-plastic-model-kits/
287•fidotron•13h ago•60 comments

Launch HN: Hyprnote (YC S25) – An open-source AI meeting notetaker

206•yujonglee•17h ago•115 comments

URL-Driven State in HTMX

https://www.lorenstew.art/blog/bookmarkable-by-design-url-state-htmx/
202•lorenstewart•12h ago•97 comments

iPhone 16 cameras vs. traditional digital cameras

https://candid9.com/phone-camera/
311•sergiotapia•20h ago•328 comments

Sleep all comes down to the mitochondria

https://www.science.org/content/blog-post/it-all-comes-down-mitochondria
27•A_D_E_P_T•1h ago•5 comments

A major AI training data set contains millions of examples of personal data

https://www.technologyreview.com/2025/07/18/1120466/a-major-ai-training-data-set-contains-millions-of-examples-of-personal-data/
8•pera•20m ago•1 comments

Learning basic electronics by building fireflies

http://a64.in/posts/learning-basic-electronics-by-building-fireflies/
268•signa11•17h ago•69 comments

Two Birds with One Tone: I/Q Signals and Fourier Transform

https://wirelesspi.com/two-birds-with-one-tone-i-q-signals-and-fourier-transform-part-1/
73•teleforce•11h ago•16 comments

ACM Transitions to Full Open Access

https://www.acm.org/publications/openaccess
264•pcvarmint•17h ago•24 comments

Show HN: The Aria Programming Language

https://github.com/egranata/aria
5•egranata_aria•3d ago•4 comments

Analoguediehard

http://www.analoguediehard.com/
24•gregsadetsky•3d ago•4 comments

Show HN: Cant, rust nn lib for learning

https://github.com/TuckerBMorgan/can-t
11•TuckerBMorgan•3d ago•0 comments

USB-C for Lightning iPhones

https://obsoless.com/products/iph0n3-usb-c-protection-case
149•colinprince•3d ago•102 comments

How the brain increases blood flow on demand

https://hms.harvard.edu/news/how-brain-increases-blood-flow-demand
124•gmays•15h ago•57 comments

FoundationDB: From idea to Apple acquisition [video]

https://www.youtube.com/watch?v=C1nZzQqcPZw
180•zdw•4d ago•34 comments

Show HN: Terminal-Bench-RL: Training long-horizon terminal agents with RL

https://github.com/Danau5tin/terminal-bench-rl
115•Danau5tin•23h ago•10 comments

Show HN: I built an AI that turns any book into a text adventure game

https://www.kathaaverse.com/
253•rcrKnight•18h ago•100 comments

Irrelevant facts about cats added to math problems increase LLM errors by 300%

https://www.science.org/content/article/scienceadviser-cats-confuse-ai
411•sxv•19h ago•200 comments

A month using XMPP (using Snikket) for every call and chat (2023)

https://neilzone.co.uk/2023/08/a-month-using-xmpp-using-snikket-for-every-call-and-chat/
118•ColinWright•15h ago•74 comments

My 2.5 year old laptop can write Space Invaders in JavaScript now (GLM-4.5 Air)

https://simonwillison.net/2025/Jul/29/space-invaders/
532•simonw•20h ago•356 comments

Structuring large Clojure codebases with Biff

https://biffweb.com/p/structuring-large-codebases/
81•PaulHoule•19h ago•4 comments

Elements of System Design

https://github.com/jarulraj/periodic-table
128•qianli_cs•16h ago•34 comments

Observable Notebooks 2.0 Technology Preview

https://observablehq.com/notebook-kit/
213•mbostock•19h ago•51 comments

Playing with more user-friendly methods for multi-factor authentication

https://tesseral.com/blog/i-designed-some-more-user-friendly-methods-for-multi-factor-authentication
74•noleary•1d ago•51 comments

Microsoft Flight Simulator 2024: WebAssembly SDK

https://docs.flightsimulator.com/msfs2024/html/6_Programming_APIs/WASM/WebAssembly.htm
137•breve•3d ago•84 comments

Supervised fine tuning on curated data is reinforcement learning

https://arxiv.org/abs/2507.12856
56•GabrielBianconi•14h ago•17 comments

CodeCrafters (YC S22) is hiring first Marketing Person

https://www.ycombinator.com/companies/codecrafters/jobs/7ATipKJ-1st-marketing-hire
1•sarupbanskota•12h ago

The Sail instruction-set semantics specification language

https://alasdair.github.io/manual.html
41•weinzierl•3d ago•8 comments