[Standards] Re: LAST CALL: XEP-0440 (SASL Channel-Binding Type Capability)

Your references merely say that unsafe options like RSA key exchange (having no forward secrecy) etc. have been removed from TLS 1.3. This makes it more difficult to shoot yourself in the foot, which is good. But again, I'd argue that most modern XMPP servers and clients (at least those implementing XEP-0440) use TLS 1.2 with a reasonable configuration (e.g. more or less matching that of TLS 1.3). That said, somebody not wanting to implement TLS 1.3 but only 1.2 would indeed be a red flag. As far as TLS is concerned, version 1.3 is definitely the only sensible way forward. -tmolitor