Daniel Gultsch

Recent Projects

Software

• Conversations - an encrypted, mobile friendly XMPP client for Android
• Ltt.rs - No-frills, easy to use, easy to maintain Email client for Android based on the JSON Meta Application Protocol (JMAP)
• Java JMAP library - A Java library for the JSON Meta Application Protocol
• XMPP Server Status - Status page and uptime monitor for XMPP servers
• Conversations Push Proxy - An XEP-0357: Push Notifications app server that relays push messages between the user’s server and Googles Firebase Cloud Messaging.

Security

• CVE-2015-8688: Gajim Roster Push Attack / Message Interception
• CVE-2018-6591: Converse.js leaking information about which rooms are bookmarked
• CVE-2019-16235+: Multiple Vulnerabilities found in Dino

Standardization

RFCs

• RFC 9749: Use of Voluntary Application Server Identification (VAPID) in JSON Meta Application Protocol (JMAP) Web Push

XMPP Protocol Extensions (XEP)

• XEP-0333: Displayed Markers
• XEP-0363: HTTP File Upload
• XEP-0384: OMEMO Encryption
• XEP-0398: User Avatar to vCard-Based Avatars Conversion
• XEP-0490: Message Displayed Synchronization

Essays

• Conversations: A Mission Statement
• The State of Mobile XMPP in 2016
• Blind Trust Before Verification
• An Objection to ‘The ecosystem is moving’
• A series leading up the release of Conversations 2.0
  • The rocky road to OMEMO by default
  • Here lies the Sliding Pane Layout. RIP
• A pathway to a well regulated instant messaging market

Talks

• Jabber/XMPP: Instant Messaging selber in die Hand nehmen @ MRMCD 2017 (German)

Commercial products & services

• XMPP Consulting
• Server setup - get your own XMPP server up and running
• conversations.im - an XMPP provider that also offers Domain Hosting

Contact

• hidden with JavaScript (e-mail & xmpp)
• Mastodon
• Codeberg
• pgp.pub.asc
  2C93 2578 ED08 1860 2179
  023A F43D 18AD 2A09 82C2