You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
No, but it would increase user privacy.
When establishing an initial connection to an XMPP server, the following is sent without encryption when a client executes the XmppClient.login() method:
<stream to="[server]" from="[user_jid]" ...>
The user's JID is exposed prior to the starttls proceeding and visible to a passive network observer.
Describe the solution you'd like
Restrict sending of from="[user_jid]" before starttls has occurred. This issue was originally raised at tigase/Martin#22 and a potential solution is already known:
Is your feature request related to a problem? Please describe.
No, but it would increase user privacy.
When establishing an initial connection to an XMPP server, the following is sent without encryption when a client executes the XmppClient.login() method:
The user's JID is exposed prior to the starttls proceeding and visible to a passive network observer.
Describe the solution you'd like
Restrict sending of
from="[user_jid]"
before starttls has occurred. This issue was originally raised at tigase/Martin#22 and a potential solution is already known:Describe alternatives you've considered
N/A
Additional context
Using: Siskin IM 7.3.3
The text was updated successfully, but these errors were encountered: