Am Mittwoch, 19. Oktober 2022, 16:32:55 CEST schrieb Dave Cridland: > Small point: GS2 doesn't ever allow clients to know if channel binding is > proven, since the channel binding data is passed in the clear to the > server. It does prove the server saw the channel binding data as sent by > the client, but not whether the server can see the same channel.
Surely the GS2 implementing server would abort authentication if the channel- binding data did not match it's own channel. right? -tmolitor _______________________________________________ Standards mailing list Info: https://mail.jabber.org/mailman/listinfo/standards Unsubscribe: standards-unsubscr...@xmpp.org _______________________________________________
