[jdev] No realm from server
stpeter at stpeter.im
Thu Nov 12 18:09:53 CST 2009
On 11/13/09 9:04 AM, Tobias Markmann wrote:
> On Fri, Nov 13, 2009 at 1:00 AM, Peter Saint-Andre <stpeter at stpeter.im
> <mailto:stpeter at stpeter.im>> wrote:
> Never enough helpful documentation for developers. :)
> Sure. However with prosody we've decided to follow to road of maximum
> interoperability considering the large variety of broken and RFC
> violating implementations. So we try to let the client securely login as
> good as we can and if we can't the login just fails. Even if it means
> setting a realm if it's missing, adjusting it, and so on. There are
> quite some code in prosody's DIGEST-MD5 code only for interoperability.
> I deeply hope we can go cleaner and more strict with SCRAM-*.
SCRAM was designed to be cleaner. Let's hope it is in practice. :)
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 6820 bytes
Desc: S/MIME Cryptographic Signature
More information about the JDev