2 ms·
> The problem used to be that many software implementations (not just XMPP) would happily continue unencrypted if STARTTLS was not offered. Thanks for the corr
by southerntofu 5y ago
> The problem used to be that many software implementations (not just XMPP) would happily continue unencrypted if STARTTLS was not offered.
Thanks for the correction. I thought that was in fact a "feature" from a StartTLS perspective.
> easily block TLS handshake packets on a direct TLS connection
But then no downgrade attack is possible at all.
> (relatively new) ESNI
Is there any deployment of that in XMPP clients/servers yet?