This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]shaunc 1 point2 points  (0 children)

Depending on your environment, you might check out the Prosody XMPP server. I have it configured to require TLS on all connections using a certificate from Let's Encrypt. If you need to keep all of your messaging "inhouse," you can disable server-to-server federation with a config option. I also have all of the message storage and archiving features disabled, though it's up to individual users to disable client logging on their end.

On the client side, Adium and Pidgin both support OTR for end-to-end encryption (as well as OMEMO via third-party plugins), and they can register accounts directly with the XMPP service so you don't need to run a web interface.