3 ms·
>and attacks like this are just downright scary https://notes.valdikss.org.ru/jabber.ru-mitm/ https://notes.valdikss.org.ru/jabber.ru-mitm/ That attack strike
by upofadown 2y ago
>and attacks like this are just downright scary
https://notes.valdikss.org.ru/jabber.ru-mitm/ https://notes.valdikss.org.ru/jabber.ru-mitm/
That attack strikes me as generic. As in not anything to do with XMPP specifically.
- dngray 2y ago> As in not anything to do with XMPP specifically. The fact that STARTTLS is even possible with that protocol is bad.
- upofadown 2y agoWhat does STARTTLS have to do with a MITM attack based on certificate substitution? What XMPP servers still allow unencrypted client connections by default?