We've published a new blog post about the recent jabber.ru security incident (a kind of attack we have not seen before). It did not affect Snikket servers, but we are taking steps to remove the possibility of such attacks in the future. This includes advice that self-hosters can follow.
https://snikket.org/blog/on-the-jabber-ru-mitm/
