[tor-bugs] #1676 [Tor bundles/installation]: Audit jabber/XMPP support for pidgin

[Tor Bug Tracker & Wiki]

#1676: Audit jabber/XMPP support for pidgin
--------------------------------------+-------------------------------------
 Reporter:  katmagic                  |          Owner:  ioerror 
     Type:  defect                    |         Status:  assigned
 Priority:  critical                  |      Milestone:          
Component:  Tor bundles/installation  |        Version:          
 Keywords:  pidgin, DNS               |         Parent:  #2918   
   Points:                            |   Actualpoints:          
--------------------------------------+-------------------------------------

Comment(by rransom):

 Now that we can tell Pidgin to never perform direct (unproxied) DNS SRV
 queries, we need to either (a) teach Pidgin to perform the SRV query it
 needs for XMPP using DNS-over-TCP over Tor (and pick a TCP-capable DNS
 server for Pidgin to use, so it won't connect to the user's system-wide
 DNS resolver (i.e. the user's ISP) over Tor), or (b) provide a separate
 tool to perform the required SRV query and tell users how to feed the
 results to Pidgin ''and tell users how to find and use that tool''.

 If we decide to provide a separate tool (possibly as a stopgap solution),
 the DNS SRV query is for the ‘hostname’ `_xmpp-client._tcp.gmail.com`, and
 the resulting hostname and port go in the ‘Connect server’ and ‘Connect
 port’ fields, respectively, on the ‘Advanced’ tab of Pidgin's account
 settings dialog.  (I don't know how to parse the hostname and port out of
 the SRV reply.)

 See [attachment:pidgin-gtalk-dns-queries-2011-05-26-01-summary-lines.txt
 pidgin-gtalk-dns-queries-2011-05-26-01-summary-lines.txt] for a Wireshark
 packet-summary dump of Pidgin performing the SRV query required for an
 XMPP account on `gmail.com`.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1676#comment:24>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online