monal-im.org :xmpp:

Open source XMPP client for iOS and macOS with focus on privacy and convenient chatting.

MATRIX - 𝐌onolithic, 𝐀wfully 𝐓rendy 𝐑e-𝐈mplementation of 𝐗MPP

iOS: https://apps.apple.com/app/id317711500
macOS: https://apps.apple.com/app/id1637078500
Web: https://monal-im.org/
Source: https://github.com/monal-im/Monal

Public Key

npub1xxsakz442dmz57rx5s4tazelfqenfheha4k3j5v0njxf7fkhfwhqntxwre

NIP-05 Address

monal_at_fosstodon.org@momostr.pink

Profile Code

nprofile1qqsrrgwmp264xa320pn2g2473vl5sve5mum76mge2x8eerylymt5htspp4mhxue69uhhjctzw5hx6egpp4mhxue69uhkummn9ekx7mqrwxkaa

Publishing to

yabu.me

nos.lol

relay.damus.io

Author Public Key

npub1xxsakz442dmz57rx5s4tazelfqenfheha4k3j5v0njxf7fkhfwhqntxwre

Show more details

Last Notes

2026-03-11 23:31:07 UTC

- reply

my attitude is that I expect maintainers to maintain things, just like I'm maintaining my project fixing bugs when they get reported. Especially if those bugs render the app unusable for a huge portion of users (as with this ejabberd bug rendering ejabberd nearly unusable).

2026-03-11 23:08:25 UTC

- reply

okay, I guess I have to publish a post telling my users to switch the server to prosody then, or switch from Debian to nix 🤷‍♂️

2026-03-11 23:05:56 UTC

- reply

aren't you a maintainer of the ejabber packet? I might have misunderstood the term "maintainer", but shouldn't you, uhm, maintain the packet then?
Why should I start maintaining the packet? Do you mean you aren't capable of doing it and want to resign your maintainership of that packet?

2026-03-11 22:58:57 UTC

- reply

didn't you talk about updating Debian? Shouldn't fixing stable be top priority for you?
And no, I'm neither Debian developer nor do I have enough Erlang experience to do that, but *I* will be the person that has to answer all those support requests once our push server certs still having client auth eku expired and push stops working.
And to be clear: on iOS push is vital for a usable client.

2026-03-11 22:51:58 UTC

- reply

and what about fixing stable first?

2026-03-11 22:46:55 UTC

- reply

ah, so youre talking about that p1 TLS module? That wasn't entirely clear to me.

2026-03-11 22:41:18 UTC

- reply

unfortunately there is no package, not even in sid, having the needed commit from Holger over here: https://salsa.debian.org/ejabberd-packaging-team/ejabberd/-/commits/trixie?ref_type=heads
Without that, even an updated p1 TLS packet is useless 🤷‍♂️
Not even starting to talk about Debian stable...

2025-09-26 00:01:30 UTC

- reply

well, unfortunately its a lot more complicated: we can't know if the server supports ssdp when sending the clientfirst message. But that's where the y or n must be set.

2025-09-25 22:36:14 UTC

- reply

the thing Herr is: you have to behave differently if the server supports signing the cb and method lists using 0474 and if it doesn't. An attacker won't be able to fake that signature so its safe to rely on this signal.
If 474 isn't supported, "y" is the right way to do it, if it is supported, "n" is the right way.
Monal doesn't do this distinction yet and that's clearly a bug, I'll fix that.

2025-08-23 22:26:34 UTC

- reply

yes, #Monal does support this too (released about a year ago).

2025-08-11 06:06:45 UTC

Monal 6.4.13 (Build 1046, PR #1456) released.
- Don't mirror local camera view in videocalls
- Don't autodisable account on some minor errors
- Fix mam queries broken by last release
#Monal #ios #macos #xmpp #im #chat #messaging

2025-08-08 15:21:54 UTC

- reply

xmpp is even an ietf standard. Imagine someone saying "well, http 1.1 is nice, but it has its issues, I'll completely reinvent it under a different name using a different technology and a different government model", we never would've had nearly ubiquitous http2 and the web landscape would be highly fragmented. Or it would have failed entirely, of course.
That's just not a smart move if you don't have (nearly) infinite manpower and infinite money.

2025-02-22 06:51:17 UTC

- reply

thats not true, encryption and notifications work pretty well. No reactions yet, we are in the process of rewriting our chat ui to make reactions possible, though :)

2025-02-19 19:13:24 UTC

- reply

here is the reason why: https://github.com/monal-im/Monal/wiki/Battery-consumption
Tldr; iOS doesn't measure the battery consumption right: the real battery consumption is *way* lower.

2025-02-17 21:29:21 UTC

- reply

wie are currently in the process of rewriting most of our ui. If you tell me what exactly is broken in monal, I can put this onto our to do list for the rewrite as well :)

2025-01-27 10:41:07 UTC

Monal 6.4.10 (Build 1029, PR #1380) released.
- Don't accept forbidden control characters as chat input
- Update ssdp implementation to version 0.4
- Fix some more bugs
#Monal #ios #macos #xmpp #im #chat #messaging

2025-01-24 01:41:55 UTC

- reply

(Technically, with omemo the message is only encrypted once with a random "master key". This key is then encrypted separately for every device using the key of that device. The ciphertext of your original message is then sent together with the encrypted copies of the " master key" in one message.)

2025-01-24 01:41:34 UTC

- reply

unfortunately its a bit more complicated. You are right, omemo uses a different key for every device, but all encrypted versions are sent in one message.
The reason for message loss could rather lie in the fact, that key distribution and trust management is a bit more complicated if every device has its own key. And some clients might also suppress certain decryption errors and show nothing at all.

2025-01-21 19:01:28 UTC

- reply

your friend should try #Monal. Notifications work like a charm just the way you'd want them to (even for groups/channels not hosted on your snikket server).

2025-01-09 13:20:52 UTC

- reply

even without those improvements, #xmpp is significantly better performing than matrix.
Joining a channel/group will only take a few seconds (~5-10) even in large channels.
Of course this can even be improved further, like @npub1j6j…fj60 said :)
@npub1nqn…nfm7 @npub18ds…6490

2024-12-02 19:45:41 UTC

- reply

yes apparently. It didn't accept the neutral ar.

2024-11-22 15:30:34 UTC

- reply

at monal we are offering a stun and turn server as fallback (you can disable this in the settings).
So far (over the last ~12 month) we didn't have any traffic excess.
Our tun and turn server seems to be used way less than originally anticipated.

2024-11-21 08:08:28 UTC

- reply

Monal has an autodelete option in its settings. You can select a custom time as well as some predefined intervals. All messages older than that are automatically deleted from history.

2024-11-20 02:39:15 UTC

Monal 6.4.6 (Build 989, PR #1288) released.
- Fix regression when connecting solely using old STARTTLS connection method
- Fix crash when being unable to connect while creating new account
- Fix connection problems on slow connections
- Show timestamp of last received push in notification debug menu
- Fix various other crashes
#Monal #ios #macos #xmpp #im #chat #messaging

2024-10-15 23:58:46 UTC

Monal 6.4.5 (Build 982, PR #1258) released.
To see the complete list of bugfixes and improvements, check our releases page: https://github.com/monal-im/Monal/releases/tag/Build_iOS_982
#Monal #ios #macos #xmpp #im #chat #messaging

2024-09-24 12:31:20 UTC

- reply

banking apps normally don't detect sideloading. And sideloading is only a security problem if done from untrusted sources. But I'd consider fdroid very trusted.
I'd even say the risk of installing spyware etc. is higher when installing something from the playstore compared to fdroid. I remember I read some article of security researchers analyzing the play store for malware and their findings were a bit shocking.

2024-09-23 21:59:18 UTC

- reply

why not use conversations on android?

2024-09-13 16:13:05 UTC

- reply

yes exactly :)

2024-09-13 15:41:25 UTC

- reply

you aren't allowed to query the disco if you don't have a presence subscription. (That's independent of pubsub.)
But for your use case that doesn't matter. We do the exact thame thing in Monal: if we get a muc answer back, the jid is a muc, every other answer/error means that the jid is an 1:1 chat or not existing at all :)

2024-09-02 22:40:02 UTC

- reply

monal has group management (released several month ago). You can create groups and manage membership as well as manage channels (but not create channels).

2024-08-30 13:34:33 UTC

- reply

otr is dead, the successor is omemo (based on the same double ratchet protocol signal uses)...and yes, omemo can seamlessly be used across multiple devices :)

2024-08-30 12:50:37 UTC

- reply

sure, this was solved ~8 years ago. History is synced between all devices nowadays :)

2024-08-24 13:20:32 UTC

- reply

you did not understand the purpose of quickly at all.
It's a spinn-off of conversations (android) and monal (iOS) with precisely one change: allowing users to sign up using their phone number and uploading the address-book.
Why? Because there are people out there that find it too hard to select a server, username and proper password and want auto discovery of users by uploading their address book.
If you aren't one of these users, please use the main apps (conversations/monal)

2024-08-18 18:08:34 UTC

Monal 6.4.4 (Build 978, PR #1211) released.
- Fix xmpp: uri handling
- Fix spurious PLAIN warning again
#Monal #ios #macos #xmpp #im #chat #messaging