Great thread!
Jitsi certainly boasts an impressive set of features, including support for various chat networks / protocols.
It seems to me that users would need to have a Jabber/XMPP account somewhere, to get much of the functionality. XMPP.NET contains a nice list of servers that offer such accounts. However, it seems that most (all?) servers store the user passwords in plain text (example: http://jabber.hot-chilli.net/legal/privacy/ ); digging through the privacy statements of several of them, Iām left with the impression that this is being done for backwards compatibility with older clients.
That brings me to two questions:
- Can someone recommend a Jabber server that encrypts all the way (including the user passwords), preferably one that is NOT hosted in the US.
- Can someone point out the security exposure resulting from compromised credentials (i.e. which aspects of the communication are at risk)?
Cheers,