[jdev] Strophe 1.0.2 released

[Julien Genestoux]

Congrats on the release Jack!
Have you had a little time to look at our branch where we propose a split
between the XMPP parts and the Bosh parts, so that, maybe we could use other
underlying protocols, like websockets and/or socket.io or even a regular TCP
socket (which would allow for use in node.js!).

Let me know,
Julien


On Sun, Jun 19, 2011 at 4:55 PM, Jack Moffitt <jack at metajack.im> wrote:

> Hi all,
>
> Strophe 1.0.2 has been released. Please consider upgrading immediately
> as it contains a security fix affecting DIGEST-MD5 SASL
> authentication.
>
> All the downloads and documentation can be found at:
> http://strophe.im/strophejs
>
> Note that this website is brand new and should remain the permanent
> home of the project. The old site at code.stanziq.com died with
> Collecta, although it still redirects to the new home.
>
> The full change log can be found here:
> https://raw.github.com/metajack/strophejs/release-1.0.2/CHANGELOG.txt
>
> I don't know of any exploits for the DIGEST-MD5 problem, but the fact
> that the client nonce never changed on a particular browser is
> probably not good. Thanks go to Julian Scheid for finding and
> reporting this to me.
>
> I went through most of the pull requests and applied them. There were
> a handful that didn't make it due to the need for more review. I'll
> get to these as soon as I can, but I think I got all the ones that fix
> major bugs.
>
> Please give it a whirl and let me know if you find anything I missed.
>
> jack.
> _______________________________________________
> JDev mailing list
> Info: http://mail.jabber.org/mailman/listinfo/jdev
> Unsubscribe: JDev-unsubscribe at jabber.org
> _______________________________________________
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.jabber.org/jdev/attachments/20110620/8edecf66/attachment.htm>