Yes, Prosody does allow it, but you're right that the documentation is vague - it's because it's a bit awkward at the moment. We're planning to release 0.9.1 o

Yes, Prosody does allow it, but you're right that the documentation is vague - it's because it's a bit awkward at the moment. We're planning to release 0.9.1 on Monday to address this issue (or you can grab one of our nightlies at https://prosody.im/nightly/0.9/ https://prosody.im/nightly/0.9/ (build 160+) ). Should have docs up in the next couple of days, but for now it should suffice to say that you can simply add a 'dhparam' field to your existing 'ssl' option in your config file that is a path to a DH parameters file created with something like: openssl dhparam -2 2048 > prosody-dhparam.pem Hope this helps!