Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

advertising SCRAM-SHA-256 breaks irccloud and possibly other clients #1782

Closed
slingamn opened this issue Aug 25, 2021 · 0 comments · Fixed by #2032
Closed

advertising SCRAM-SHA-256 breaks irccloud and possibly other clients #1782

slingamn opened this issue Aug 25, 2021 · 0 comments · Fixed by #2032

Comments

@slingamn
Copy link
Member

If a server advertises both PLAIN and SCRAM-SHA-256, irccloud attempts SCRAM, but if it fails it doesn't fall back to PLAIN. This breaks authentication for anyone who registered an account on Ergo 2.7 or lower --- we need at least one successful PLAIN authentication in order to generate the SCRAM credentials.

Accordingly, advertisement of SCRAM-SHA-256 will be disabled in Ergo 2.8; we'll revisit down the line.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant