Re: [Operators] XMPP Security Talk to IAB

2014-09-01 Thread Jonas Wielicki
On 01.09.2014 13:37, Dave Cridland wrote: > I'm already discussing the .im DNSSEC issue, so .ru seems also sensible to > mention. > > Anyone know if .de supports DNSSEC? That's another popular domain for XMPP > services. FWIW, I have it deployed, but for non-XMPP purposes. regards, jwi

Re: [Operators] XMPP Security Talk to IAB

2014-09-01 Thread Holger Weiß
* Stefan Strigler [2014-09-01 13:47]: > Seems so: http://www.denic.de/domains/dnssec.html There's also an English translation, FWIW: http://www.denic.de/en/domains/dnssec.html Holger

Re: [Operators] XMPP Security Talk to IAB

2014-09-01 Thread Felix Eckhofer
Hey. Am 01.09.2014 13:37, schrieb Dave Cridland: Anyone know if .de supports DNSSEC? That's another popular domain for XMPP services. It does since 2011. felix

Re: [Operators] XMPP Security Talk to IAB

2014-09-01 Thread Stefan Strigler
Seems so: http://www.denic.de/domains/dnssec.html It says, it's available since May 2011. 2014-09-01 13:37 GMT+02:00 Dave Cridland : > > > > On 1 September 2014 12:19, Evgeny Khramtsov wrote: > >> Mon, 1 Sep 2014 11:52:22 +0100 >> Dave Cridland wrote: >> >> > On 31 August 2014 22:28, Evgeny K

Re: [Operators] XMPP Security Talk to IAB

2014-09-01 Thread Dave Cridland
On 1 September 2014 12:19, Evgeny Khramtsov wrote: > Mon, 1 Sep 2014 11:52:22 +0100 > Dave Cridland wrote: > > > On 31 August 2014 22:28, Evgeny Khramtsov wrote: > > > > > Sun, 31 Aug 2014 22:35:07 +0200 > > > Jonas Wielicki wrote: > > > > > > > > > > I left the c2s-encryption-required switch

Re: [Operators] XMPP Security Talk to IAB

2014-09-01 Thread Evgeny Khramtsov
Mon, 1 Sep 2014 11:52:22 +0100 Dave Cridland wrote: > On 31 August 2014 22:28, Evgeny Khramtsov wrote: > > > Sun, 31 Aug 2014 22:35:07 +0200 > > Jonas Wielicki wrote: > > > > > > > I left the c2s-encryption-required switch in place (there would > > > have been out-of-band measures to reach me

Re: [Operators] XMPP Security Talk to IAB

2014-09-01 Thread Dave Cridland
On 31 August 2014 22:28, Evgeny Khramtsov wrote: > Sun, 31 Aug 2014 22:35:07 +0200 > Jonas Wielicki wrote: > > > > I left the c2s-encryption-required switch in place (there would have been > > out-of-band measures to reach me if that had been a problem) > > A year ago I did some experiment on a

Re: [Operators] XMPP Security Talk to IAB

2014-08-31 Thread Evgeny Khramtsov
Sun, 31 Aug 2014 22:35:07 +0200 Jonas Wielicki wrote: > I left the c2s-encryption-required switch in place (there would have been > out-of-band measures to reach me if that had been a problem) A year ago I did some experiment on a medium size server (150,000 users online in peak). I modified ej

Re: [Operators] XMPP Security Talk to IAB

2014-08-31 Thread Jonas Wielicki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 29.08.2014 10:54, Dave Cridland wrote: > I've been asked to give a talk next Wednesday to the Internet > Architecture Board - the senior panel of the IETF - about the > changes we made to encryption on the XMPP network. > [snip] > > I'm interest

Re: [Operators] XMPP Security Talk to IAB

2014-08-29 Thread Waqas Hussain
On Fri, Aug 29, 2014 at 8:28 AM, Dave Cridland wrote: > On 29 August 2014 11:45, Marco Cirillo wrote: > >> The main challenge, at least here, regards communicating with "silos" >> like Google/Google Apps domains and webex hosted domains (cisco.com >> etc). And since my users demanded that with

Re: [Operators] XMPP Security Talk to IAB

2014-08-29 Thread Dave Cridland
On 29 August 2014 11:45, Marco Cirillo wrote: > The main challenge, at least here, regards communicating with "silos" > like Google/Google Apps domains and webex hosted domains (cisco.com etc). > And since my users demanded that with high voice irregardless of security I > had in the end to (add

Re: [Operators] XMPP Security Talk to IAB

2014-08-29 Thread Marco Cirillo
The main challenge, at least here, regards communicating with "silos" like Google/Google Apps domains and webex hosted domains (cisco.com etc). And since my users demanded that with high voice irregardless of security I had in the end to (add code to) allow exceptions to grant s2s communication

[Operators] XMPP Security Talk to IAB

2014-08-29 Thread Dave Cridland
Folks, I really need your help. I've been asked to give a talk next Wednesday to the Internet Architecture Board - the senior panel of the IETF - about the changes we made to encryption on the XMPP network. When I say "I've been asked", I quite clearly mean "They asked lots of more sensible peop