Version 0.5.0 of XEP-0474 (SASL SCRAM Downgrade Protection) has been released.
Abstract: This specification provides a way to secure the SASL and SASL2 handshakes against method and channel-binding downgrades. Changelog: * Add business rules describing client behavior * Make clear that PLAIN still has to be pinned away, if not disabled entirely (tm) URL: https://xmpp.org/extensions/xep-0474.html Note: The information in the XEP list at https://xmpp.org/extensions/ is updated by a separate automated process and may be stale at the time this email is sent. The XEP documents linked herein are up-to- date. _______________________________________________ Standards mailing list -- [email protected] To unsubscribe send an email to [email protected]
