Technology1 min read

Lonewolf 0.3 – A standalone XMPP server written in Rust

By · Published by Everything Blog

In short

The software now enables federation by default for domains with public DNS names and trusted certificates, utilizing SASL EXTERNAL while removing Server Dialback. Client functionality is expanded through the default activation of Private XML Storage and Software Version queries. Additionally, operational controls have been tightened by halving the default client stanza limit to 256 KiB and incorporating TLS overhead into traffic byte counts.

Key points

  • Creating accounts or updating passwords under this version introduces credential formats…: Creating accounts or updating passwords under this version introduces credential formats that break compatibility with older server binaries.
  • Administrators can manage certificate revocation list checks by disabling HTTP downloads…: Administrators can manage certificate revocation list checks by disabling HTTP downloads or providing a local file path.
  • The platform remains a single-node implementation distributed under the Apache-2.0 licens…: The platform remains a single-node implementation distributed under the Apache-2.0 license with clustering deferred to future releases.

Sources checked by our analysis pipeline: 1

Repository navigation

Lonewolf v0.3.0 adds certificate-authenticated federation, direct TLS, and more desktop client features. It remains a pre-1.0, single-node server; full XMPP compliance and clustering remain on the roadmap.

Client and federation features

- Federation exchanges messages, IQs, presence, and roster subscriptions with other XMPP servers. Hosts with configured certificates and public DNS names federate by default. Peers need trusted certificates and SASL EXTERNAL; Server Dialback is not supported.

- Bidirectional connections (XEP-0288) let compatible servers share one connection. Stream Limits Advertisement (XEP-0478) exchanges federation stanza and idle limits.

- Direct TLS (XEP-0368) adds client and server listeners and combined STARTTLS/direct-TLS federation discovery.

- Private XML Storage (XEP-0049) stores private client settings and legacy bookmarks. Software Version (XEP-0092) answers domain software queries, with operating system disclosure off by default. Both extensions are enabled by default.

- Opt-in SCRAM-SHA-512 and SCRAM-SHA-512-PLUS implement an expired Internet-Draft, not an RFC or IANA-registered mechanism. Account creation and password changes write credentials older binaries cannot read, even when SHA-512 login is disabled.

The standards reference records supported roles and limits.

Operations and tooling

- Federation…

Technology

More in Technology