Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Avoid sending the "from" JID before starttls #217

Open
realbiz21 opened this issue May 2, 2023 · 0 comments
Open

Avoid sending the "from" JID before starttls #217

realbiz21 opened this issue May 2, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@realbiz21
Copy link

Is your feature request related to a problem? Please describe.
No, but it would increase user privacy.

When establishing an initial connection to an XMPP server, the following is sent without encryption when a client executes the XmppClient.login() method:

<stream to="[server]" from="[user_jid]" ...>

The user's JID is exposed prior to the starttls proceeding and visible to a passive network observer.

Describe the solution you'd like
Restrict sending of from="[user_jid]" before starttls has occurred. This issue was originally raised at tigase/Martin#22 and a potential solution is already known:

let client: XMPPClient;
client.connectionConfiguration.useSeeOtherHost = false

Describe alternatives you've considered
N/A

Additional context
Using: Siskin IM 7.3.3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant