Re: [Standards] Fwd: [Uta] STARTTLS vulnerabilities

2021-08-12 Thread Ruslan N. Marchenko
Am Mittwoch, dem 11.08.2021 um 14:25 -0600 schrieb Peter Saint-Andre: > Too bad we didn't stick to our guns in 2003 and insist on two ports > instead of one, but STARTTLS was the recommended approach back > then... > I am still not convinced the STARTTLS is ultimate evil. SMTP had way too many bug

Re: [Standards] Proposed XMPP Extension: Disco Feature Attachment

2021-08-12 Thread goffi
Le 2021-08-11 17:35, Jonas Schäfer a écrit : Hi goffi, Thanks for proposing this. The council has today vetoed the advancement for this ProtoXEP to Experimental, but I'd like to give you some feedback because I think the problem you're trying to address is real. The bottom of this email cont

Re: [Standards] Fwd: [Uta] STARTTLS vulnerabilities

2021-08-12 Thread Sam Whited
We've had this discussion before but for context in this thread: I ignore that as it doesn't make any sense (and follow the second thing and just decide myself how I want to connect). I know at least one or two others do to, but I don't know which strategy is more wide spread. —Sam On Thu, Aug 12

Re: [Standards] Fwd: [Uta] STARTTLS vulnerabilities

2021-08-12 Thread Holger Weiß
* Sam Whited [2021-08-11 17:21]: > In my experience it's widely supported these days. At least for c2s, yes. > I also don't know if clients prioritize these records over starttls. XEP-0368 says: | Both 'xmpp-' and 'xmpps-' records SHOULD be treated as the same record | with regard to connectio

Re: [Standards] Fwd: [Uta] STARTTLS vulnerabilities

2021-08-12 Thread Martin
Quoting Kim Alvefur : We were always at war with STARTTLS? The world is at war with both ports < 443 and ports > 443. ___ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: standards-unsubscr...@xmpp.org