qxmpp icon indicating copy to clipboard operation
qxmpp copied to clipboard

SCRAM-SHA-1-PLUS + SCRAM-SHA-256-PLUS + SCRAM-SHA-512-PLUS + SCRAM-SHA3-512-PLUS supports

Open Neustradamus opened this issue 1 year ago • 1 comments

Dear @qxmpp-project team, @lnjX, @jlaine, @tehnick, @0xd34df00d,

It follows the original ticket about SCRAM-SHA-*.

  • https://github.com/qxmpp-project/qxmpp/issues/177

For security, It is always important to support SCRAM-SHA-*-PLUS variants too.

Recently, we have seen the jabber.ru MITM:

  • https://notes.valdikss.org.ru/jabber.ru-mitm/
  • https://snikket.org/blog/on-the-jabber-ru-mitm/
  • https://www.devever.net/~hl/xmpp-incident
  • https://blog.jmp.chat/b/certwatch

It is possible to comment this important Qt ticket about Channel Binding?

  • https://bugreports.qt.io/browse/QTBUG-77783

Thanks in advance.

Linked to:

  • https://github.com/scram-sasl/info/issues/1

Neustradamus avatar Nov 10 '23 18:11 Neustradamus

Dear @qxmpp-project team members,

I wish you a Happy New Year 2024!

After some comments, an email sent to [email protected], there is an important comment about my original ticket about Channel Binding and Qt, I think that you can do an answer here? You are impacted...

  • https://bugreports.qt.io/browse/QTBUG-77783?focusedId=768178&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-768178

Thanks in advance.

Neustradamus avatar Jan 15 '24 17:01 Neustradamus