[jdev] Securing XMPP

[Peter Saint-Andre]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 8/28/13 12:42 PM, Olle E. Johansson wrote:
> 
> 28 aug 2013 kl. 18:33 skrev Peter Saint-Andre
> <stpeter at stpeter.im>:
> 
>> DANE/DNSSEC is great for that, or will be when it is more
>> generally available, but IMHO we might need to wait *years* for 
>> that to happen.
> 
> Peter, If you keep repeating this statement it will become true...

I don't think stpeter is that powerful. ;-)

> I don't think we're talking so many years here, but it all depends
> on which TLD you're using. In Sweden we've had DNSsec support in
> .SE for many years, we have patches for OpenSSL for DANE and are
> starting to look at code.

And our friends in .jp don't even have DNS SRV support yet!

> I think you should modify this statement that one might need to
> wait years for DANE/DNSsec to be implemented in all TLDs.

It's not just the registrars -- it's the resolvers, the nameservers,
the operating systems, the application software, the clients, the
servers, the distros, etc. There are a lot of moving parts involved.

Just my centigram of silver. ;-)

Peter

- -- 
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBAgAGBQJSHqN2AAoJEOoGpJErxa2p8qgQAJDb9+irrLk2s56xXSp0ZoW9
o/IxgeBQNu6m3Ov0fKvuA8KBVUBBdyJw+b1m0+xQDguhrKz0RQQFva7lV91g1uq/
WDq5cQnKufX8lR4KXIiEZ0qaH7fh7P9LWMZSICTRMvb60DaAsFZEmUL79Y9sP/KS
4YpyihVKuQ+e8s7bA9l4TY9jbZh4UUoEtRkeKVh8NJlqG2LHItIV7M9y/gseXyBQ
6CNYn1r48h8YzJATcdE7sZqBwjj2S8tU0tHnA92IWBvKPKF9cBGJqXl11kPqF+7C
x2qzBqIkAmsONOqLB/XiAKRNM65qG1/tV1ZNWA5njD9aMdj63AadB2/gUrqZMjiT
fInZju3GJidqX8/m0mF/DpmGAymxRDTEBeFf1qCX4BPrDYtcTJHJkRv63erTnhsl
3h4oh8TCPks1N01y2YfwzeK1zfUitqEH4E6oFcXrZdIwO2u40eYsjpQnLU/spnUs
N9zZ27w/26CxEAuI/rtK3xToDA93S71gLs/AJJlv/KF6x+Z4EUwAS1qxhuYDA/k0
DKNo0G9/YBHMgoPbK0YDS20bW/ehO1zEnHtXW337OzCv855JJ2OIJ6HEDwgfxaii
HziOzfj77OQy7zMieLRURCNaIsOa6Fgutv/Jq2Ylf26yiNwDxL0tzM4XbHnieW5j
50V2cfdC3lZi4z2BN/l6
=toIw
-----END PGP SIGNATURE-----