prosody
77ac0d96ac24
CHANGES

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Comparison

CHANGES @ 12206:77ac0d96ac24

mod_s2s: Enable outgoing Direct TLS connections Makes it faster by cutting out the roundtrips involved in <starttls/>, at the cost of making an additional SRV lookup. Since we already ignore a missing <starttls/> offer and try anyway there is not much difference in security. The fact that XMPP is used and the hostnames involved might still be visible until the future Encrypted ClientHello extension allows hiding those too.
author Kim Alvefur <zash@zash.se>
date Fri, 21 Jan 2022 17:59:19 +0100
parent 12187:94253e02d47d
child 12303:fa79db7e0a4d
comparison
equal deleted inserted replaced
12205:a2e6605303fa 12206:77ac0d96ac24
25 ### Security and authentication 25 ### Security and authentication
26 26
27 - SNI support (including automatic certificate selection) 27 - SNI support (including automatic certificate selection)
28 - ALPN support in mod_net_multiplex 28 - ALPN support in mod_net_multiplex
29 - DANE support in low-level network layer 29 - DANE support in low-level network layer
30 - Direct TLS support (c2s and incoming s2s) 30 - Direct TLS support (c2s and s2s)
31 - SCRAM-SHA-256 31 - SCRAM-SHA-256
32 - Direct TLS (including https) certificates updated on reload 32 - Direct TLS (including https) certificates updated on reload
33 - Pluggable authorization providers (mod_authz_) 33 - Pluggable authorization providers (mod_authz_)
34 - Easy use of Mozilla TLS recommendations presets 34 - Easy use of Mozilla TLS recommendations presets
35 - Unencrypted HTTP port (5280) restricted to loopback by default 35 - Unencrypted HTTP port (5280) restricted to loopback by default