diff options
| author | defanor <defanor@uberspace.net> | 2020-11-12 14:23:30 +0300 |
|---|---|---|
| committer | defanor <defanor@uberspace.net> | 2020-11-12 14:23:30 +0300 |
| commit | 257999ac7a08789cc421983493e43ecf5e169bab (patch) | |
| tree | 5508c95777e2da46d100b21e3ccd9ef3ca8beb9a /README | |
| parent | 6eabee8c7612a58695e791cb1281aae1a6c5c215 (diff) | |
Check server certificates using DANE (TLSA)
Currently it is just experimental and does not affect the
verification (except for adding a delay); perhaps the verification
should be made configurable, including an option to rely on DANE.
Diffstat (limited to 'README')
| -rw-r--r-- | README | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -14,7 +14,7 @@ rely on any particular UI, should be flexible and not stay in the way of implementing additional XEPs on top of it, and should try to make it easy to implement a decent client application using it. -Current dependencies: c-ares, libxml2, gnutls, gsasl. +Current dependencies: c-ares, libxml2, gnutls, gnutls-dane, gsasl. A rough roadmap: @@ -39,6 +39,7 @@ A rough roadmap: [+] XEP-0368: SRV records for XMPP over TLS. [+] SOCKS5 (RFC 1928) support. Implemented, though can be improved. [+] XEP-0199: XMPP Ping. +[.] Certificate verification using DANE (experimental). - Library refinement: |