Version 0.5 of XEP-0440 (SASL Channel-Binding Type Capability) has been released.
Abstract: This specification allows servers to annouce their supported SASL channel-binding types to clients. Changelog: * Address a possible MITM attack vector by making the tls-server-end- point channel-binding mandatory to implement * Remove the whole 'Interaction with SASL mechanisms' section and replace it with 'Business Rules' * Rework whole 'Security Considerations' section * Some minor editorial changes * Add Thilo Molitor as author (tm) URL: https://xmpp.org/extensions/xep-0440.html Note: The information in the XEP list at https://xmpp.org/extensions/ is updated by a separate automated process and may be stale at the time this email is sent. The XEP documents linked herein are up-to- date. _______________________________________________ Standards mailing list -- [email protected] To unsubscribe send an email to [email protected]
