yarmo/yarmo.eu
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Improve writing
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
Yarmo Mackenbach 2020-07-23 14:29:01 +02:00
parent 0e37394478
commit 115429e915
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
content/blog/2020/07/2020-07-23--keyoxide-xmpp-omemo.md
View File

@ -38,9 +38,9 @@ If you wish to secure your communication with OMEMO, make sure to choose a [clie
When you talk with someone over XMPP and you want to guarantee all communication is secured, it is recommended to use a different form of communication to compare and trust each others fingerprints. Ideally, you would meet in person and scan QR codes, a handy function of the **Conversations** app.
## Keyoxide as a source of trust
## XMPP identity proofs and Keyoxide
As you can see, trusting OMEMO keys is an essential step of the process to ensuring secure communication. Luckily for us, [Keyoxide](https://keyoxide.org) can assist you in that process.
As you can see, trusting OMEMO keys is an essential step in the process of ensuring communication is secure. Fortunately, [Keyoxide](https://keyoxide.org) can assist you in that process.
As of [version 0.4](https://codeberg.org/keyoxide/web/releases/tag/0.4.0), Keyoxide generates QR codes for all **verified** XMPP accounts it detects. This makes it easy to add new contacts if your [XMPP identity proof](https://keyoxide.org/guides/xmpp) looks like this:
@ -58,7 +58,7 @@ It is also possible to add a more advanced [XMPP identity proof](https://keyoxid
proof@metacode.biz=xmpp:user@domain.org?omemo-sid-123456789=A1B2C3D4E5F6G7H8I9...
```
Obtaining the correct URI for the proof can be difficult when doing so manually. Fortunately, this can be assisted by the **Conversations** app. As you can tell, using the **Conversations** brings a ton of advantages.
Obtaining the correct URI for the proof can be difficult when doing so manually. Fortunately, this can be assisted by the **Conversations** app. As you can tell, using the **Conversations** app brings a ton of advantages.
In the main menu of that app, press **Manage accounts > [your account] > Share > Share as XMPP URI** and add the resulting URI to your key using [this Keyoxide guide](https://keyoxide.org/guides/xmpp).
@ -66,7 +66,7 @@ Scan the resulting QR code on a Keyoxide profile page and not only is the contac
## Why trust the Keyoxide identity proof?
Anyone can add any XMPP proof to their OpenPGP key, whether they own it or not. So why trust what Keyoxide says?
Anyone can add any XMPP proof to their OpenPGP key, whether they own it or not. So why trust the identity proof on Keyoxide?
**STEP 1** The QR code is only shown if a XMPP identity proof is verified. Verifying a XMPP account requires the holder of said account to add a small line of code to their XMPP bio [as described in this guide](https://keyoxide.org/guides/xmpp). Only a person with access to both the OpenPGP private key and the XMPP account can verify that XMPP account.