moparisthebest/xeps
1
0
Fork 0
mirror of https://github.com/moparisthebest/xeps synced 2024-11-24 18:22:24 -05:00
Code Issues Releases Wiki Activity

Merge branch 'xep-0440' into premerge

Browse Source
This commit is contained in:
Jonas Schäfer 2022-08-30 15:40:11 +02:00
commit 4045ce619c
1 changed files with 13 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
xep-0440.xml
View File

@ -23,6 +23,14 @@
<supersededby/> <supersededby/>
<shortname>sasl-cb-types</shortname> <shortname>sasl-cb-types</shortname>
&flow; &flow;
<revision>
<version>0.3.0</version>
<date>2022-08-29</date>
<initials>tm</initials>
<remark>
Make implementation of tls-server-end-point a MUST for servers.
</remark>
</revision>
<revision> <revision>
<version>0.2.0</version> <version>0.2.0</version>
<date>2020-08-04</date> <date>2020-08-04</date>
@ -144,9 +152,9 @@
case, implementations may want to allow the set of pinned channel-binding case, implementations may want to allow the set of pinned channel-binding
types to be extended to stronger ones.</p> types to be extended to stronger ones.</p>
<p>As further mitigation, it is RECOMMENDED to implement the <p>As further mitigation, servers MUST and clients are RECOMMENDED to
channel-binding type tls-server-end-point (&rfc5929;) to increase the at least implement the channel-binding type tls-server-end-point (&rfc5929;)
probability of a mutual supported channel-binding type.</p> to increase the probability of a mutual supported channel-binding type.</p>
</section1> </section1>
@ -173,8 +181,8 @@
<p>Thanks to Sam Whited for the discussion about the underlying <p>Thanks to Sam Whited for the discussion about the underlying
issue and incentivizing me to come up with this extension. Further issue and incentivizing me to come up with this extension. Further
thanks goes to Ruslan N. Marchenko for pointing out the possible thanks goes to Ruslan N. Marchenko for pointing out the possible
MITM attack vector. Last but not least, Dave Cridland provided MITM attack vector. Last but not least, Dave Cridland and Thilo Molitor
valuable feedback.</p> provided valuable feedback.</p>
</section1> </section1>