Omemo support for XMPP
I want to bridge an xmpp muc with omemo to a discord server on a self-hosted mattermost instance, but I can't since mattermost does not support omemo.
If there currently is a way to brute-force matterbridge into being able to work with xmpp messages encrypted with omemo, please correct me, but as far as I know, there is no way to do that currently. That is a shame because pretty much everyone who uses xmpp in the 21st century uses it with omemo.
I think, the OMEMO has the sense when all users in a group have it on their clients. However, when you bridge a chat room to another non-encrypted network such as Discord, or even just an IRC (actually, in a scope of security, all usually encrypted content gets disclosed to thirdparty users). Then, the sense of OMEMO gets lost. At the Matrix side, when bridge bots are used, chats gets configured being non-encrypted, otherwise, this makes a serious overcomplication due to the mechanism used by Matrix. So, I have some advices (until anybody really implements OMEMO at the MatterBridge):
- If you want the encryption between server and clients (and bot), it should be enough to just have the TLS configured on your XMPP server side (in modern days, the rest of public XMPP servers do run TLS based things).
- Multi-user groups are supposed to be disclosed to other networks to thirdparties, should be non-encrypted. I.e. members of MUC group with a bridge bot should disable OMEMO to ensure the thing works correctly.