jdev - 2023-10-21

DANE all the things

Drop .im domains entirely 🙈🙉

Yes! DANE all things!

dane wouldnt be necessary if dnssec + caa records became the norm

Ahh, wow this CAA stuff looks interesting: https://support.dnsimple.com/articles/caa-record/

either you know which company youre paying to trust, or you know youre using letsencrypt with an account key

and in either case the subject for your cert *is your domain name* so thats where to have this fixed, in dns

email made a mistake

dnssec is the certificate authority of dns

I'm working on some documentation for channel binding in XMPP. It would be helpful if client devs could let me know whether their client supports channel binding (i.e. SCRAM-*-PLUS) and in what version, and whether it supports tls-exporter (for compatibility with TLS 1.3).

Was there a thing that could query DOAP?

If you implement the TLS 1.3 tls-exporter channel binding, consider adding `<implements rdf:resource="https://www.rfc-editor.org/info/rfc9266"/>` to your DOAP for some sort of discoverability :)

Yes that's what I did for Renga (but not yet released, I should do that soon!)

I sent a patch for rfc9266 to gloox but it is not merged there yet

Prosody doesn't have it in a release yet either, sadly

prosody release coming soon? :-)

Mmmmmmmmmmmmaybe.