-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 11/09/2015 05:22 PM, Tomasz Sterna wrote:
> Dnia 2015-11-09, pon o godzinie 15:29 -0500, Travis Burtrum pisze:
>> accepting raw xmpp along with https on 443 is not a good option 
>> because it's obviously xmpp and can be trivially blocked
> 
> Should XSF work on technologies targetted on circumventing
> security policies?

That seems like a ridiculous question to me.  If not, why even bother
with STARTTLS/TLS in the first place?  It *could* be used for
circumventing security policies after all.

And yes, SRV record resolution could be blocked too perhaps.

This proposal isn't specifically targeted at running
xmpp-over-tls-on-port-443, it's just generically
xmpp-over-tls-however-server-operators-would-like-to-implement-it, and
it has opportunities of implementing it different ways, like
multiplexing on the same port as other services if they would like, or
anything else.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=
=4CD1
-----END PGP SIGNATURE-----

Reply via email to