[jdev] Re: s2s doubts

Stephen Marquard scm at marquard.net
Wed May 18 11:42:25 CDT 2005


Justin Karneges wrote:
> On Wednesday 18 May 2005 12:59 am, JD Conley wrote:
> 
>>I think he's referring to Dialback + TLS.  So you get the
>>"authentication" of dialback with the encryption, but not
>>authentication, of StartTLS.

Yes.

> If this was meant to be possible, it certainly isn't clear in RFC 3920.  Is 
> this an extension documented somewhere?

You do TLS as documented for streams (if advertised as a stream 
feature), and then dialback as documented. TLS doesn't add much 
additional complexity - the only subtlety is to wait for TLS to complete 
once it's started before sending any dialback packets.

Regards
Stephen




More information about the JDev mailing list