XMPPCopy wiki link

XMPP is a mature family of open standards for federated messaging, presence, and related applications. Accounts use domain-based JIDs, and messages can cross both the sender’s and recipient’s servers.

Extensible federationCopy wiki link

The core protocol supplies routing, authentication, presence, and server federation. XMPP Extension Protocols add group chat, archives, file transfer, calls, and many other capabilities. This allows incremental deployment but makes a protocol name insufficient to describe one reproducible security profile.

OMEMO boundaryCopy wiki link

OMEMO adds multi-device E2EE using X3DH and Double Ratchet constructions. Its specification explicitly excludes metadata and traffic analysis from its protection. As of July 2026, XEP-0384 remains an experimental extension.

Security therefore depends on exact client and server support, trust decisions for new device keys, archive handling, attachment encryption, gateways, and downgrade behavior. An organization that controls the client profile can manage these variables more effectively than an open federation of arbitrary implementations.

Secure and decentralized communication stacks compares XMPP with Matrix and dedicated private messengers.