Sam Whited

@rugk Still not possible without shipping an entire TLS stack. You may want to ask on my upstream issue: https://code.google.com/p/android/issues/detail?id=82587

> Does SCRAM-PLUS fall back to regular SCRAM if none of the channel bindings work? No, this would potentially make you vulnerable to a MITM by using a downgrade attack...

There shouldn't be any security problems; conscrypt appears to use BoringSSL, which accounts for that, see the docs for [`ssl.h`](https://commondatastorage.googleapis.com/chromium-boringssl-docs/ssl.h.html#SSL_get_tls_unique): > The tls-unique value is defined by https://tools.ietf.org/html/rfc5929#section-3.1. Due to...

@iNPUTmice I could probably throw together a quick implementation at some point just for us to start testing it out, but I'd be worried about my channel binding I-D not...

I'm catching back up on this conversation and my previous concern that my I-D didn't have expert review has now been fixed as it's published as [RFC 9266](https://www.rfc-editor.org/info/rfc9266). Would we...

Sounds good, thanks. I believe this will also require updating the target SDK to version 31 to use the [exportKeyingMaterials](https://developer.android.com/reference/android/net/ssl/SSLSockets#exportKeyingMaterial(javax.net.ssl.SSLSocket,%20java.lang.String,%20byte[],%20int)) function. I'll give it a look, but it's been so...

Ah, nevermind, the update to 31 was easy enough, but I forgot that I never could get the giant webrtc stack working or building (or maybe I did at one...

On Wed, Jun 8, 2016 at 4:00 PM, hoijui [email protected] wrote: > can omemo also be used for voice and video communication/streams, or is it just for text messages and...

The folks I was testing this gave up on XMPP because calls wouldn't work, so I don't have a way to test this anymore. If this was the issue though...

I just had this (or something that exhibits the same behavior, but this time with a jmp.chat number) happen again and got the following error message, the speex packages are...