5 ms·

Jabber support for FB Chat is nice, but failing to support SSL/TLS is not really acceptable...

• aaronblohowiak 17y ago
  When would you use FB chat and care about the privacy of the communication?
  • compay 17y ago
    At work, probably.
  • aw3c2 17y ago
    This includes the login I guess...
    • deleted 17y ago
      [deleted]
    • philfreo 17y ago
      can someone confirm that login info is sent in the clear? that's pretty terrible.
      • j0 17y ago
        yep. they could have at least supported SASL to have the login info encrypted and then transport the rest of the stream unencrypted, but they did not.
      • kam 17y ago
        They claim they're using DIGEST-MD5, so not quite plaintext, but a broken hash algorithm http://www.facebook.com/help/?faq=16742 http://www.facebook.com/help/?faq=16742 http://www.facebook.com/help/?faq=16741 http://www.facebook.com/help/?faq=16741
  • evgen 17y ago
    When I am using a real Jabber client.
• presto10 17y ago
  Where does it say SSL/TLS is not supported?
  • natrius 17y ago
    When you try to connect with "Require SSL/TLS" enabled.
  • zppx 17y ago
    Just check the instructions for iChat it clearly says to uncheck SSL.
• rlpb 17y ago
  Has the AJAX-based chat built into the web application ever been encrypted?