Re: [Security] TLS Certificates Verification

[Peter Saint-Andre]

Jonathan Dickinson wrote:

Just to clarify on David's idea. Did you mean (in less words)

wrapping a TLS stream in stanzas?

That was the original idea behind "XTLS":

http://www.xmpp.org/extensions/inbox/xtls.html



http://www.xmpp.org/extensions/xep-0246.html

/psa

But then we realized we'd have more code reuse if we started an end-to-end stream and upgraded via STARTTLS:

smime.p7s
Description: S/MIME Cryptographic Signature