OMEMO Multi-End Message and Object Encryption

Device Trust. With OMEMO you no longer trust user identities but device identities. If you are communicating with a contact for the first time or if that contact recently got a new device, you will be presented with a fingerprint for that device.‎


OMEMO - Daniel Gultsch

OMEMO. Daniel Gultsch. December 8th 2016 @ XMPP Security Meetup London. Crypto features. Forwared secrecy; Authenticity (Deniability) Security in general and end-to-end encryption in particular is always a tradeoff.‎


OMEMO - Wikipedia

OMEMO is an extension to the Extensible Messaging and Presence Protocol (XMPP, "Jabber") for multi-client end-to-end encryption developed by Andreas Straub.‎


OMEMO | Tim Schlotfeldt

Die Inhalte dieser Website sind, soweit nicht anders dargelegt, unter der Creative Commons-Lizenz CC-BY-SA lizenziert.‎

XMPP/Jabber vs. Signal Metadata

Jan 1, 2019

Hello Privacy community! ​ I was wondering what theoretically reveals more metadata. XMPP or Signal? ​ Im using []( \+ OMEMO at the moment vs SignalApp both downloaded from the Play store. (I know using F-Droid would be better) ​ Any thoughts on this? I'd really welcome them! Happy new year![...]/abcx45/xmppjabber_vs_signal_metadata/‎



python-omemo A Python implementation of the OMEMO Multi-End Message and Object Encryption protocol. This python library offers an open implementation of the OMEMO Multi-End Message and Object Encryption protocol as specified here.‎

XMPP vs Matrix - What should I use?

Apr 5, 2019

I've tried XMPP via Conversations and Matrix via Riot. So far I like Riot because of all the extra features and because of how visually appealing it is. But from what I understand, XMPP+OTR is superior to Matrix in regards to security, anonymity, and encryption. What would you guys recommend?[...]va0b/xmpp_vs_matrix_what_should_i_use/‎


Are we OMEMO yet? | Tracking the progress of …

Tracking the progress of OMEMO integration in XMPP clients.‎

Slixmpp gets OMEMO support

Feb 25, 2019‎


OMEMO - Tech Autonomy Infrastructure - Tech …

OMEMO (OMEMO Multi-End Message and Object Encryption) is a multi-end to multi-end payload encryption ("e2e") technology for XMPP services originally developed for and implemented by the Conversations XMPP client based on the double-ratchet algorithm popularized by the Signal Private Messenger service, and has been formally standardized as XEP-0384.‎

Shaking Hands with OMEMO: X3DH

Apr 5, 2019[...]/b9pv5c/shaking_hands_with_omemo_x3dh/‎


The rocky road to OMEMO by default -

The rocky road to OMEMO by default Why it took us more than two years to enable End-to-End encryption by default: The first in a series of essays leading up to the release of Conversations 2.0‎


Dec 21, 2018

Hello, I'm looking for a simple XMPP command-line interface that I can use in scripts. I've found `sendxmpp` already, but it's so temperamental - I keep having to change the arguments around to get it keep working - and recently it's stopped working altogether? Does anyone know of a simple CLI (for Linux please) I can use in scripts to send XMPP messages? It seems completely ridiculous that such a thing doesn't exist :-/‎


XEP-0384: OMEMO Encryption - XMPP Main

This specification defines a protocol for end-to-end encryption in one-on-one chats that may have multiple clients per account.‎

Riot's UI makes encryption look scary, discouraging people from using it.

Nov 2, 2018

I compiled an album of the "warnings" you are shown when you start an encrypted conversation with another Matrix user: # Matrix dark patterns that discourage encryption * Encryption is hidden at the bottom of the third tab of the room configuration * There is a warning next to the option to turn it on * If you flip the switch, you're presented with a multiple paragraph warning dialog * Before anyone sends a message, they are warned about unverified devices * You ca...[...]es_encryption_look_scary_discouraging/‎



Public Document Properties Client Paci c Research Alliance Title OMEMO: Cryptographic Analysis Report Version V1.0 Author Sebastian Verschoor Reviewed by Melanie Rieback‎

Are there any trusting Distributed,end to end encrypted Audio and Messaging apps for android?

Jan 15, 2019

I want the app to keep no logs,so that no metadata will be given to the company and, everything should be downloaded in my android phone/pc. The ones i know are. Tox ( I don't know if it's secure enough) Jami (don't know much about it either,but i think the app sends metadata) Jitsi (which is still in beta,i dont know if we can trust it), Signal keeps many information when signing in. Ricochet is the best for PC but has no android version Wire sends metadata,and please don't ask m...[...]re_any_trusting_distributedend_to_end/‎

Trustworthy and secure XMPP/Jabber servers?

Sep 19, 2018

As a newbie to the Conversations messenger, I'm curious to know which are some of the XMPP/Jabber servers that you would consider actually trustworthy and secure (OMEMO encryption support, hashed passwords, storage of data/metadata, etc)? []( and []( both have plenty of choices but I'd like to know your opinions and choices. :)[...]tworthy_and_secure_xmppjabber_servers/‎

Monal iOS and MacOS released with OMEMO

Feb 5, 2019

Monal has been updated in the mac app store with OMEMO support. Monal for iOS has also been updated with the same code: The mac client is the only native macOS client with OMEMO support.[...]nal_ios_and_macos_released_with_omemo/‎

Can you use OMEMO Encryption across two different XMPP servers?

Nov 18, 2018

Quick question... I am running 2 Prosody XMPP servers and can communicate between them, but **not** with OMEMO encryption enabled. My client (Conversations) hangs at "Fetching Keys" and I'm never able to authenticate. Should I be able to use OMEMO across two different Prosody XMPP servers? Or does each user have to be on the same server to use OMEMO?[...]omemo_encryption_across_two_different/‎

OTR version 4

Feb 25, 2019

The specification: [](‎

Monal adds OMEMO support

Jun 28, 2018‎

Self-hosting Signal?

Oct 12, 2018

I am trying to self-host Signal without success. I have been searching for fixes, but none worked. Could someone link me a guide or something that could help me with it?‎

Is Kontalk rolling their own crypto?

Jan 9, 2019

I looked around a little bit for what Kontalk has created for encrypting their messages, but without getting into the source code I haven't found much. From [their GitHub]( >Current encryption method is a custom extension we developed when end-to-end specificiations were a bit sparse and experimental. >We will soon switch to the new [XEP-0374]( being evaluated these days by the XSF. ...[...]k/is_kontalk_rolling_their_own_crypto/‎

XMPP questions/help

Sep 12, 2018

Hello, A friend and I are trying to switch from Google to XMPP. We made accounts and everything is working fine with Pidgin + OTR. We're now trying to get Conversations set up and it seems like only OMEMO is an option. The app wants us to scan a bar code, which neither of us can find. I can locate the fingerprint but not a barcode. When they send me a message on Conversations it shows up in my Pidgin. Is the issue that we're using OTR and OMEMO? I'm new to XMPP and really need some help to ...‎

Why Does TailsOS use KeepassX as it’s Password Manager?

Nov 27, 2018

To my knowledge, KeepassX is highly outdated and it’s development is dead. KeepassX was forked into KeepassXC, which now has a larger community and has active development and bug fixes. So my question is, Why hasn’t Tails switched over to KeepassXC?[...]_tailsos_use_keepassx_as_its_password/‎

Encrypted Messaging

Dec 13, 2018

When it comes to encrypted messaging there are four names that come to mind for me... Telegram, Wire, Signal & Threema. My question is which out of these four do you yourself use, trust, recommend & why?‎

OMEMO, fingerprint and device IDs

Mar 2, 2019

Hi all, Have a few questions conceptually: -Are fingerprints and device IDs "published" to the server? On an ejabberd server, using either Conversations or gajim with the OMEMO plugin, I see three "device IDs," when I'd only ever tried OMEMO with one. When it comes time for me to be presented with fingerprints to trust, I see two others from me, and one from my contact. I've tried the "clear devices" dialog, but for whatever reason, on reconnect, those device IDs come back. Can someone give...[...]ju4q/omemo_fingerprint_and_device_ids/‎

Future of OMEMO « vanitasvitae's blog

Sep 7, 2018[...]as/future_of_omemo_vanitasvitaes_blog/‎

[Question]: Best Self hosted XMPP Server & Chat Client?

Nov 27, 2018

Hey Everyone, ​ Currently, my company uses Pandion & OpenFire combo and, since it hasn't been updated in ages.. I'd like to replace it with an XMPP Chat client or, other Chat / Messenger that is Free or, relatively low cost for interdepartmental communication. ​ Anyone have any suggestions? I should also mention.. if, there is an XMPP client or, one that can be self-hosted by our server that allows a chat web based connection that would be absolutely fantastic.. n...[...]t_self_hosted_xmpp_server_chat_client/‎

People like to talk about Signal vs Telegram vs XXX until them foams — how about XMPP?

Apr 27, 2018

e.g. in Android we have Xabber and Conversations. what makes xmpp hasn't been adopted more broadly? not popular etc why invent new platform like signal, mtpro etc. — is otr/pgp and omemo not secure enough?[...]e_to_talk_about_signal_vs_telegram_vs/‎