-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 11/09/2015 05:22 PM, Tomasz Sterna wrote: > Dnia 2015-11-09, pon o godzinie 15:29 -0500, Travis Burtrum pisze: >> accepting raw xmpp along with https on 443 is not a good option >> because it's obviously xmpp and can be trivially blocked > > Should XSF work on technologies targetted on circumventing > security policies?
That seems like a ridiculous question to me. If not, why even bother with STARTTLS/TLS in the first place? It *could* be used for circumventing security policies after all. And yes, SRV record resolution could be blocked too perhaps. This proposal isn't specifically targeted at running xmpp-over-tls-on-port-443, it's just generically xmpp-over-tls-however-server-operators-would-like-to-implement-it, and it has opportunities of implementing it different ways, like multiplexing on the same port as other services if they would like, or anything else. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQQcBAEBCgAGBQJWQR8eAAoJEOy5uMuqxowD5+8f/2fEc/qs4z+Pe6UvAeo1sIPA fy/tni8rk7o1pTSzpHmcQ5NlbtnTwOxA5TEirlUNLPbjoBZ5tL5lossyHTi9RVav m4MwgU//6KfVPpzAHkhKr0K7y+eEoGct5llmkQk3qbQEcrD/DpGNdNHvup36FjPC VBp+oYv5NfTCQD8bE9bBt6DzGKks900EZP7U7i4HtNSKroj1GAQh3gijIfTgI7+I /E1mJwQGLgldcsIOnYKAR9eGaJo27MJDqMlhHFmtFQKY6AbRaFcu0SI/H8xp2yVU JM0rqTUlcnKUk0C9MUr8q7A2jGGYhj+8So7eI0bNpsUhfIEmd+ih1wXTmupJN1ya gPPR3vkI2jLwH3cLWeJ82s8Vh1omcHjdRKwFB6FotEM8x0l/HCZ3+Gma3SRbEo9q MSSnCv86E9FJxYSZTLBU9yTSA2Ad1De/pwHmVgzjcTxUIYIZyVUTdgvd/pnrDWVq Biz500ocQH7/aUlOWWimWk7GFYpFTGtvdIYzRAcN8OkRCqjD/O26+iCqiRz9Lrrv F6YDYH1qYiHtDBGLfcQCBWCPQtaAPqqO+AUMf20dqStcP/smLhy72HPGEDmPWQ2i FAKfTjUn3ClqD+u2PXoz4S1Rd/4j07fBhnBfIRoADO0dk/5WfonIl3qmeUXs7ujn XmKaplo030/+keGyc+Yz8dbN3UD9MjIovVWLBhLkqskS251NocfibI1mEtR/AKxB FC6P86q6oBNxPJlwi+MRrJdX4adykFZPOAW6sav0KS8R4QH6VV0lFDVffSBZ//cz gxq3sdSaGk3ZpLoCZnZK7D9vmI/9xbdePgEWSyfkuJOf7BcdeVItPGpr5jQwX820 C+2INDLyIRLXtSTok3rrh3qgOhnF1g/i9HcytXb51AVQTSQ0297XB8QlzDrzWAIq vCaiIMBnaY3Y/3VS7akj3iIXoEqLV33fjV0zZzQ09/02MiumfS6OWRrQt3dzg5kX Nqosm1popWenzVWcz02sKM4Y67z8SEp1zJNi0vQ4cLNEfFB7VHK3yLyRW2ProZNj N+S66l/zFpHVE1WrhLgH1HIBV/xsoYoCMrOWmS9AfR0L+4/dPnVpMrWB0TPrA2Q3 R1H2gXVfaupDUmQgCiSDS7bIhrWXXXuP13/r7Br/g5usnpdXA8STjKXzAVsukBwA bEbTzvfO5oTNseuHvIFZveIXYuT8v2XRj3C8hlNYe33L9VAIPgVlOE9NKlrk68rq W+fxdbwO/gSZfbLa90QPRGCKl+BsO+9NrW3qvv4cE/D7X8tQH/Rfe/KapYkKPCVG PDQq+TjC2yGMBjvd4eOAINPYGkCDDJUYbePfarDCVc/0FiwS/bGv1hX2zeVRwBg= =4CD1 -----END PGP SIGNATURE-----