# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1644854343 0
# Node ID a8367f169740295bb4bcb09037763d098e7196af
# Parent  abfe210adcc45f44a3e0f93013653da4c5dbe178
prosody.cfg.lua.dist: Update s2s_secure_auth comment and default

diff -r abfe210adcc4 -r a8367f169740 prosody.cfg.lua.dist
--- a/prosody.cfg.lua.dist	Mon Feb 14 15:51:13 2022 +0000
+++ b/prosody.cfg.lua.dist	Mon Feb 14 15:59:03 2022 +0000
@@ -105,9 +105,10 @@
 -- For more information see https://prosody.im/doc/creating_accounts
 allow_registration = false
 
--- Force certificate authentication for server-to-server connections?
+-- Require valid certificates for server-to-server connections?
+-- If false, other methods such as dialback (DNS) may be used instead.
 
-s2s_secure_auth = false
+s2s_secure_auth = true
 
 -- Some servers have invalid or self-signed certificates. You can list
 -- remote domains here that will not be required to authenticate using