While Jitsi is open-source, most people use the platform they provide, meet.jit.si, for immediate conference calls. They have now introduced a “Know Your Customer” policy and require at least one of the attendees to log in with a Facebook, Github (Microsoft), or Google account.
One option to avoid this is to self-host, but then you’ll be identifiable via your domain and have to maintain a server.
As a true alternative to Jitsi, there’s jami.net. It is a decentralized conference app, free open-source, and account creation is optional. It’s available for all major platforms (Mac, Windows, Linux, iOS, Android), including on F-Droid.
It’s hypocritical to call your service “privacy friendly” and then require the use of a Google/Facebook/GitHub account to log in. I kinda understand the reason why they do this, but they could have at least allowed you to use a more private email provider.
Calling them hypocritical is hysterical when they offer all the source code for free and you can host your own instance that doesn’t need an account.
The software is free open source. But this case is not about the software. It’s about the web instance that the majority of the people was using. And that instance now lost its privacy feature and shouldn’t call itself privacy friendly anymore.
What information is transmitted to GitHub when you sign in with your GitHub account?
I’ll tell you: that you signed into jitsi.
That’s it.
I agree with you and it’s an important distinction. But for me it’s also about the ethos of the developers or company. Promoting free and open source tools is great, but requiring the opposite as a prerequisite to use the largest publicly facing implementation of that is a very odd decision.
Is there another OAuth identity provider they should use? I agree that it’s ludicrous that advertising companies are the primary identity providers we use, but I have no issue with GitHub / Microsoft as an identity provider.
At the end of the day they could create their own account system and take on the liability of storing passwords, but why? That’s not what their software is about and as instance admins it will take away their time and focus.
At the end of the day I think what you’re chafing against is not their fault but a fundamental problem with open source software at the moment, we have no system of decentralized identity verification, and identity verification is basically a necessary part of ensuring your system isn’t abused.
@owiseedoubleyou
It’s more likely about OIDC and not “email”. In which case they could have included Gitlab I guess. Let’s give them a while, they’ll probably figure out a list, this sounds like “how can we cover largest amount of people while adding fewest providers”
@esaru
Or just remove that claim
Why would federated sign-in suddenly make them non-open source.
The comment to which I replied complained that they claim their service to be privacy friendly. They didn’t complain about the open source claim, and me neither.