XMPP Service Operators - 2018-06-08

Licaon_Kter, s2s_use_starttls: required_trusted now . We will fuck unprotected connections. The test check.messaging.one problem is corrected. Thanks Holger

404.city: so you changed it to "required" or "optional* or?

Licaon_Kter, s2s_use_starttls: "required" to s2s_use_starttls: "required_trusted"

Holger, and the iteam, could you give a score malus for allowing unencrypted connections?

Capping it to something which is not A if StartTLS is only allowed.

+1 to that

Also maybe even for allowing untrusted or invalid s2s.

Untrusted is dumb you're singling out anyone with their PKIX infra

Maranda, it can be extended with DANE, POSH and other methods once someone provides code to check for those.

Link Mauve: I don't care about such recommendations, but I'd apply your patches.

Did you push your last changes somewhere, btw?

No, these are the patches: https://check.messaging.one/patches/xmppoke.diff.txt https://check.messaging.one/patches/xmppoke-frontend.diff.txt

I didn't have the patience to split them up into commits unfortunately.

The frontend stuff is messy.

https://conference.lightwitch.org/pastebin/e9bf0985-7021-451e-9356-7f5efca0deca

🤔 🤔 🤔 🤔

Maranda: momomaestro.com can't be reached via XMPP (Server-to-server connection failed: DNS resolution failed)

-version memomaestro.com ✏

Maranda: memomaestro.com is running ejabberd version 0.0 on unix/linux 3.5.0

😱

👶jabberd

So why did the bot respond with a *different* address? *memo* vs *momo*

Because of LMC?

😋

Riiiight, it's a time glitch...