Onlyoffice is a infinitely superior software to collabora

[edernunez61]

I moved from nextcloud recently to opencloud. It's much more performant, and I am a big fan. What's incredibly frustrating is that onlyoffice is no where to be found in the official examples, and after a deep dive, I learned they were removed due to political disagreements.

Onlyoffice is a far better software compared to collabora, in functionality and in finish (just use the demo: https://www.onlyoffice.com/see-it-in-action ).

I really hope to see this sort of micromanaging opinionation disappears. It is the exact process of thought which has led us from owncloud, to nextcloud, to opencloud, each with a fragmented set of features and performance.

Onlyoffice community edition is fully open source, and to date, not one person has found malicious code or a backdoor. The arguments against it are purely political opinions, nothing more.

At the least, I hope to see these files return with clear disclaimers, at the user's peril. Though if security is really the concern, I see no reason why the onlyoffice container needs internet access at all, it can just be quarantined to the wopi server alone.

[dragotin]

As maintainers of the project, we have commented on this already a few times. In a nutshell:

• The situation around the origin of OnlyOffice and it's security situation is at least unclear. We do not want to expose any risk to our community users with that.
• We have a great solution and working relation to Collabora and with that we consider this a far better solution for our users as issues are fixed quickly and the integration constantly improves @mmeeks

I hope you will understand these reasons and support our decision. I am closing this discussion with that.

[edernunez61]

Is there a reason you needed to close this discussion so quickly, without allowing any discussion?

It was my impression opencloud was forked from owncloud for this exact reason, to prefer community driven interests and development over corporate interests. But it seems the same issues are being perpetuated here.

Onlyoffice can be fully firewalled, and security issues will not matter. It is such a shame that political opinions are affecting user choice in functionality.

[mmeeks]

I guess my opinion on which is far better software is clear :-) but there are some concerns about this claim: "is fully open source" - cf. https://isitreallyfoss.com/projects/onlyoffice/

[mmeeks]

Some thoughts: non-admin users bothered with slow-jail-setup errors: the CheckFileInfo response should return an accurate 'IsAdmin' property which should be set to false for non-admins. Should be a one-liner in the opencloud implementation.

As regards fonts - the big picture here is that COOL's font rendering does not depend on the font set present on the device end-point, but centrally managed fonts for every user on every device on the server; that means the same rendering everywhere. As regards fonts Times New Roman - is metric compatible with Liberation Serif - cf. https://sdk.collaboraonline.com/docs/installation/Fonts.html which is distributed built-in. To make fonts management easier we have a remote_font_config JSON format https://sdk.collaboraonline.com/docs/installation/Configuration.html?highlight=remote_font#enable-download-and-availability-of-more-fonts-by-pointing-to-a-font-configuration-file. The ability to search the font list is interesting, please do file an enhancement request at github.

Default zoom-level is an interesting one - if you can file a ticket for that too, do you expect that per-file, and for the UI chrome or document content, etc. - would be good to go deeper on the behavior here: https://github.com/CollaboraOnline/online/issues - thanks !

[micbar]

@mmeeks @dragotin This is a moot point…the office container can be completely firewalled from internet…a fact which everyone seems to ignore.

@edernunez61 I think you are missing an important problem: Every OO user downloads code on his device when using the application. So the software has a huge potential to distribute malicious code to the end user and track user devices in large scale.

[edernunez61]

@micbar Any major software has the potential to distribute malicious code....why does onlyoffice have a greater potential than opencloud itself, or nextcloud, or collabora, or docker itself? I, like most people, don't build any of these from source.

Is there any evidence of malicious code, or is your suspicion based only on their Russian origin?

On top of this, with docker internal networking only and cap drop, the risk is extremely minimal.

[dragotin]

@edernunez61 as a reaction on your statement "I don’t understand why the devs here feel the need to impose their purely political views on all their users. Defeats the purpose of FOSS. Just leave people to use things how they see fit.".

I do not see it like a defeat of FOSS, because FOSS also includes the freedom of the maintainers to invest time into what they seem fit. That is what we do here, we're just not setting a focus on the integration of the OO, but you can of course do it if you like.

We want to invest into partners and relationships that are productively moving forward and strengthen the FOSS environment, and that we see with Collabora. Same reason why I closed this discussion relatively fast, because I do not think that it leads us into a productive direction.

Thanks for your understanding.

[pedropintosilva]

I just prefer that software which lets me set a default zoom level, which includes times new Roman and industry standard fonts, which lets me type to search fonts instead of scrolling endlessly, which renders clearly in safari….so much more.

Thanks @edernunez61 for the constructive feedback. I have been thinking for a while about zoom defaults as we have been gathering user feedback (directly and through partners) on that matter, here is the newly created issue: CollaboraOnline/online#14938.

On that Safari rendering, cold you pretty please expand on that? BTW we have done some nice recent work affecting safari recently: Fix HiDPI blurriness on macOS/WKWebView — 8f67b845;