Conversations (software)

Last updated
Conversations
Original author(s) Daniel Gultsch
Developer(s) Daniel Gultsch
Initial releaseMarch 24, 2014;10 years ago (2014-03-24)
Stable release
2.17.2 [1]   OOjs UI icon edit-ltr-progressive.svg / 23 October 2024
Repository
Written in Java
Operating system Android ≥ 5.0
Available in German
Type Instant Messenger
License GPL-3.0-only [2]
Website conversations.im OOjs UI icon edit-ltr-progressive.svg

Conversations is a free software, instant messaging client application software for Android. It is largely based on recognized open standards such as the Extensible Messaging and Presence Protocol (XMPP) and Transport Layer Security (TLS).

Contents

The development focus is on secure communication and implementation of XMPP extensions that are important for mobile use. The trade press praised the decentralized and open nature of the transmission network and simple, intuitive usability with user guidance familiar from other applications. It enjoys recognition as a serious attempt to raise the mass suitability of XMPP-based messaging to a competitive level. [3]

The source code of the software is maintained at GitHub, and is subject to the terms of the GPL-3.0-only license. The application can be installed for free (or with donations) using F-Droid, or for a fee in the Google Play store. Google recorded over 100,000 installations as of November 2020. [4]

Features

Conversations includes optional end-to-end encryption (OpenPGP or OMEMO), and in-transit encryption (Transport Layer Security). The latter must be configured by the server computers involved in the messaging.

Conversations allows users to have multiple client devices (endpoints) logged into an account simultaneously (through XMPP), and also delivers messages to multiple client devices (synchronization) using the protocol extension "Message Carbons" ("carbon copies", XEP-0280).

Files, also encrypted, can be sent between users. Transmitted images are displayed in the conversation view as inline image messages. [5]

As an XMPP client, Conversations can exchange messages with other, different XMPP client software, in principle, and is also not tied to a particular vendor's server infrastructure. The following features are also included:

Implemented XMPP extension protocols

Conversations handles many XMPP extension protocols (XEP, official extensions of XMPP). [6]

History

In the wake of the Edward Snowden disclosures in June 2013, and Facebook's buyout of WhatsApp in February 2014, [7] "secure" messengers for mobile devices were gaining popularity. Initial Conversations source code was contributed to the public repository on January 24, 2014, [8] and the first official version, 0.1, was released on March 24, 2014. [9] Conversations soon received positive feedback. [3] [10]

Conversations was added to Google Play later in spring 2014, and to the alternative Android software repository F-Droid with version 0.1.3 on April 6, 2014. [11]

Since version 0.2, released on May 12, image messages (file transfers, in plain text or OpenPGP-encrypted) are supported, from version 0.4 (June 30) also OTR-encrypted. [5] [12] Version 1.0 followed on February 1, 2015. [13]

Developer Andreas Straub participated in the Google Summer of Code for Conversations in 2015. [14] [15] This produced drafts of a new end-to-end encryption standard (OMEMO), which were submitted to the XMPP Standards Foundation (XSF) for standardization. [16] [17]

As of version 2.0.0, the ability to use Off-the-Record Messaging (OTR) for encryption has been removed. Furthermore, OMEMO is now enabled by default in individual chats and private group chats. [18] Version 2.2.0 implemented previously optional extensions to record voice messages and share location in Conversations in May 2018. [19]

Version 2.3.0 introduced support for TLS 1.3 in September 2018. [20]

Version 2.8 introduced encrypted audio and video calls in April 2020. [21]

Quicksy

The offshoot instant messenger, Quicksy, was also created by Daniel Gultsch. [22] Users of this client open an account at the host quicksy.im, where the username consists of the phone number. This enables a contact search for other users of the app using the contacts list or phone book. This is intended to lower the barrier to entry into the XMPP (Jabber) network. Quicksy users can also communicate with XMPP users on other hosts. [23]

In 2024, the Monal team, who edits the xmpp application for iOS, adapts it's software (Monal) to use mobile-based identification, and uses the Quicksy name, to make it available on iOS, with the agreement of Quicksy's author. [24]

Reception

The Free Software Foundation includes Conversations in their software directory. [25]

In an analysis of Conversations and Xabber apps, researchers found that "forensic artefacts" [ sic ] could be found on an Android device including local user, contacts and body of messages sent or received using the app, as plaintext in the main database maintained by the app. [26]

In 2017, Raul Radonz of XDA Developers wrote a detailed review of Conversations, including an interview of developer Daniel Gultsch. The review highlighted choices of encryption and inclusion of "Forward Secrecy". [27]

In a 2020 review, Decentralize Today said "XMPP and Conversations has the potential to be an excellent and super secure messenger if you host it yourself," but "problems could emerge when you use XMPP with contacts who are on different servers." [28]

Anticapitalist webhost company, Autistici, wrote detailed setup instructions for Conversations for their XMPP service. [29]

Notable usages

In 2018, german police moves from Whatsapp application to Moka, a fork of Conversations, for all it's employees. [30]

See also

Related Research Articles

<span class="mw-page-title-main">Pidgin (software)</span> Open-source multi-platform instant messaging client

Pidgin is a free and open-source multi-platform instant messaging client, based on a library named libpurple that has support for many instant messaging protocols, allowing the user to simultaneously log in to various services from a single application, with a single interface for both popular and obsolete protocols, thus avoiding the hassle of having to deal with new software for each device and protocol.

<span class="mw-page-title-main">XMPP</span> Communications protocol for message-oriented middleware

Extensible Messaging and Presence Protocol is an open communication protocol designed for instant messaging (IM), presence information, and contact list maintenance. Based on XML, it enables the near-real-time exchange of structured data between two or more network entities. Designed to be extensible, the protocol offers a multitude of applications beyond traditional IM in the broader realm of message-oriented middleware, including signalling for VoIP, video, file transfer, gaming and other uses.

<span class="mw-page-title-main">Psi (instant messaging client)</span> Instant messaging client

Psi is a free instant messaging client for the XMPP protocol which uses the Qt toolkit. It runs on Linux, Windows, macOS and OS/2.

The landscape for instant messaging involves cross-platform instant messaging clients that can handle one or multiple protocols. Clients that use the same protocol can typically federate and talk to one another. The following table compares general and technical information for cross-platform instant messaging clients in active development, each of which have their own article that provide further information.

<span class="mw-page-title-main">Google Talk</span> Instant messaging service

Google Talk was an instant messaging service that provided both text and voice communication. The instant messaging service was variously referred to colloquially as Gchat, Gtalk, or Gmessage among its users.

The following is a comparison of instant messaging protocols. It contains basic general information about the protocols.

<span class="mw-page-title-main">Gajim</span> Free instant messaging client for the XMPP protocol

Gajim is an instant messaging client for the XMPP protocol which uses the GTK toolkit. The name Gajim is a recursive acronym for Gajim's a jabber instant messenger. Gajim runs on Linux, BSD, macOS, and Microsoft Windows. Released under the GPL-3.0-only license, Gajim is free software. A 2009 round-up of similar software on Tom's Hardware found version 0.12.1 "the lightest and fastest jabber IM client".

Off-the-record Messaging (OTR) is a cryptographic protocol that provides encryption for instant messaging conversations. OTR uses a combination of AES symmetric-key algorithm with 128 bits key length, the Diffie–Hellman key exchange with 1536 bits group size, and the SHA-1 hash function. In addition to authentication and encryption, OTR provides forward secrecy and malleable encryption.

<span class="mw-page-title-main">Jitsi</span> Videoconferencing and messaging software

Jitsi is a collection of free and open-source multiplatform voice (VoIP), video conferencing and instant messaging applications for the Web platform, Windows, Linux, macOS, iOS and Android. The Jitsi project began with the Jitsi Desktop. With the growth of WebRTC, the project team focus shifted to the Jitsi Videobridge for allowing web-based multi-party video calling. Later the team added Jitsi Meet, a full video conferencing application that includes web, Android, and iOS clients. Jitsi also operates meet.jit.si, a version of Jitsi Meet hosted by Jitsi for free community use. Other projects include: Jigasi, lib-jitsi-meet, Jidesha, and Jitsi.

<span class="mw-page-title-main">Cryptocat</span> Open source encrypted chat application

Cryptocat is a discontinued open-source desktop application intended to allow encrypted online chatting available for Windows, OS X, and Linux. It uses end-to-end encryption to secure all communications to other Cryptocat users. Users are given the option of independently verifying their buddies' device lists and are notified when a buddy's device list is modified and all updates are verified through the built-in update downloader.

<span class="mw-page-title-main">Guardian Project (software)</span> Open source security software project

The Guardian Project is a global collective of software developers, designers, advocates, activists, and trainers who develop open-source mobile security software and operating system enhancements. They also create customized mobile devices to help individuals communicate more freely and protect themselves from intrusion and monitoring. The effort specifically focuses on users who live or work in high-risk situations and who often face constant surveillance and intrusion attempts into their mobile devices and communication streams.

<span class="mw-page-title-main">ChatSecure</span> Messaging application

ChatSecure is a messaging application for iOS which allows OTR and OMEMO encryption for the XMPP protocol. ChatSecure is free and open source software available under the GPL-3.0-or-later license.

TextSecure was an encrypted messaging application for Android that was developed from 2010 to 2015. It was a predecessor to Signal and the first application to use the Signal Protocol, which has since been implemented into WhatsApp and other applications. TextSecure used end-to-end encryption to secure the transmission of text messages, group messages, attachments and media messages to other TextSecure users.

<span class="mw-page-title-main">Open Whisper Systems</span> Open source software organization

Open Whisper Systems was a software development group that was founded by Moxie Marlinspike in 2013. The group picked up the open source development of TextSecure and RedPhone, and was later responsible for starting the development of the Signal Protocol and the Signal messaging app. In 2018, Signal Messenger was incorporated as an LLC by Moxie Marlinspike and Brian Acton and then rolled under the independent 501c3 non-profit Signal Technology Foundation. Today, the Signal app is developed by Signal Messenger LLC, which is funded by the Signal Technology Foundation.

<span class="mw-page-title-main">Spark (XMPP client)</span>

Spark is an open-source instant messaging program that allows users to communicate in real time.

<span class="mw-page-title-main">OMEMO</span> Extension to XMPP for multi-client end-to-end encryption

OMEMO is an extension to the Extensible Messaging and Presence Protocol (XMPP) for multi-client end-to-end encryption developed by Andreas Straub. According to Straub, OMEMO uses the Double Ratchet Algorithm "to provide multi-end to multi-end encryption, allowing messages to be synchronized securely across multiple clients, even if some of them are offline". The name "OMEMO" is a recursive acronym for "OMEMO Multi-End Message and Object Encryption". It is an open standard based on the Double Ratchet Algorithm and the Personal Eventing Protocol . OMEMO offers future and forward secrecy and deniability with message synchronization and offline delivery.

<span class="mw-page-title-main">Signal Protocol</span> Non-federated cryptographic protocol

The Signal Protocol is a non-federated cryptographic protocol that provides end-to-end encryption for voice and instant messaging conversations. The protocol was developed by Open Whisper Systems in 2013 and was introduced in the open-source TextSecure app, which later became Signal. Several closed-source applications have implemented the protocol, such as WhatsApp, which is said to encrypt the conversations of "more than a billion people worldwide" or Google who provides end-to-end encryption by default to all RCS-based conversations between users of their Google Messages app for one-to-one conversations. Facebook Messenger also say they offer the protocol for optional Secret Conversations, as does Skype for its Private Conversations.

Wire is an encrypted communication and collaboration app created by Wire Swiss. It is available for iOS, Android, Windows, macOS, Linux, and web browsers such as Firefox. Wire offers a collaboration suite featuring messenger, voice calls, video calls, conference calls, file-sharing, and external collaboration – all protected by a secure end-to-end-encryption. Wire offers three solutions built on its security technology: Wire Pro – which offers Wire's collaboration feature for businesses, Wire Enterprise – includes Wire Pro capabilities with added features for large-scale or regulated organizations, and Wire Red – the on-demand crisis collaboration suite. They also offer Wire Personal, which is a secure messaging app for personal use.

<span class="mw-page-title-main">Xabber</span> Open source instant messaging software

Xabber is a XMPP client for the Android Operating System. It is developed as an open source Project on GitHub and is licensed under the GNU GPL v.3 license. The original developers are from a software company called Redsolution, Inc. Xabber is available on the Android Play Store and on F-Droid.

<span class="mw-page-title-main">Element (software)</span> Decentralized encrypted chat and collaboration software powered by the Matrix protocol

Element is a free and open-source software instant messaging client implementing the Matrix protocol.

References

  1. https://codeberg.org/iNPUTmice/Conversations/releases/tag/2.17.2.{{cite web}}: Missing or empty |title= (help)
  2. "Conversations F-Droid".
  3. 1 2 "Conversation: OpenSource Instant-Messenger im Holo-Design und mit Ende-zu-Ende-Verschlüsselung". Android User (in German). 2014-05-15. Retrieved 2021-10-14.
  4. "Conversations (Jabber / XMPP) - Apps on Google Play". play.google.com. Retrieved 2021-10-14.
  5. 1 2 "Update zum Beitrag: Conversations: Neuer Jabber/XMPP Client für Android | Netbunker". 2016-01-21. Archived from the original on 2016-01-21. Retrieved 2021-10-14.
  6. Gultsch, Daniel (2021-10-14), Conversations , retrieved 2021-10-14
  7. Frosch, Tilman; et al. (2014). "How Secure is TextSecure?" (PDF). Cryptology ePrint Archive: 17.
  8. Gultsch, Daniel (January 24, 2014). "Initial Commit, Conversations". github.com. Archived from the original on 2016-01-19.
  9. "Release 0.1 · iNPUTmice/Conversations". GitHub. Retrieved 2021-10-14.
  10. "Conversations – WhatsApp Alternative #9: XMPP im Google Style « N-Droid Magazin". 2016-01-19. Archived from the original on 2016-01-19. Retrieved 2021-10-14.
  11. "Difference between revisions of "eu.siacs.conversations" - F-Droid". f-droid.org. Retrieved 2021-10-14.
  12. Gultsch, Daniel (2021-10-14), Conversations , retrieved 2021-10-14
  13. "Release 1.0 · iNPUTmice/Conversations". GitHub. Retrieved 2021-10-14.
  14. "Summer of Code 2015 - XMPP WIKI". wiki.xmpp.org. Retrieved 2021-10-14.
  15. "Google Summer of Code 2015 Organization XMPP Standards Foundation Project Axolotl support for Conversations". www.google-melange.com. Retrieved 2021-10-14.
  16. "XEP-xxxx: OMEMO Encryption". 2016-01-29. Archived from the original on 2016-01-29. Retrieved 2021-10-14.
  17. Gultsch, Daniel (2015-09-02). "OMEMO Encrypted Jingle File Transfer". xmpp.org. Retrieved 2021-10-14.
  18. "Changelog for conversations 2.0 beta". Github. March 17, 2018.
  19. "version bump to 2.2.0-beta + changelog". Github. May 12, 2018.
  20. "version bump to 2.3.0 + changelog". Github. October 5, 2018.
  21. "Release 2.8.0 · iNPUTmice/Conversations". GitHub. Retrieved 2021-10-14.
  22. "Quicksy". Quicksy. Retrieved 2021-10-14.
  23. Böck, Hanno (November 22, 2018). "Mit der Telefonnummer ins Jabber-Netz". www.golem.de. Archived from the original on 2018-11-22. Retrieved 2021-10-14.
  24. "Quicksy". App Store. 2024-10-13. Retrieved 2024-10-14.
  25. "Conversations.im - Free Software Directory". directory.fsf.org. Retrieved 2021-10-14.
  26. Akinbi, Alex; Ojie, Ehizojie (2021-03-06). "Forensic analysis of open-source XMPP/Jabber multi-client instant messaging apps on Android smartphones". SN Applied Sciences. 3 (4): 430. doi: 10.1007/s42452-021-04431-9 . ISSN   2523-3971. S2CID   233467928.
  27. Radonz, Raúl (2017-12-10). "Conversations is an Open Source & Secure Jabber/XMPP Client for Android". XDA Developers. Archived from the original on 2021-05-15. Retrieved 2022-03-24.
  28. "The 2020 review of Messaging Service Providers: XMPP/Conversations". Decentralize.Today. 2020-09-16. Archived from the original on 2021-10-25. Retrieved 2021-10-14.
  29. "autistici.org - Conversations Configuration Howto". www.autistici.org. Retrieved 2021-10-14.
  30. "Bundespolizei - Homepage - Annual Report 2020" (PDF). www.bundespolizei.de. Retrieved 2024-07-24.