> On Tuesday 17 May 2005 11:01 pm, Stephen Marquard wrote:
> > JD Conley wrote:
> > > TLS/SASL requires a separate connection per domain since XMPP
makes no
> > > provisions for establishing streams to multiple domains over the
same
> > > connection.  Opening a stream within a stream is prohibited.
> >
> > SASL requires that. jabberd 1 and 2 support TLS to encrypt sessions
but
> > without verifying certificates, so allow TLS with multiple domains
over
> > the same connection.
> 
> So the channel is not authenticated at all?  Welcome to SMTP!
> 

I think he's referring to Dialback + TLS.  So you get the
"authentication" of dialback with the encryption, but not
authentication, of StartTLS.

-JD
_______________________________________________
jdev mailing list
jdev@jabber.org
http://mail.jabber.org/mailman/listinfo/jdev

Reply via email to