[ gaim-Feature Requests-1212448 ] option to require ssl/tls

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

[ gaim-Feature Requests-1212448 ] option to require ssl/tls

SourceForge.net
Feature Requests item #1212448, was opened at 2005-06-01 02:08
Message generated for change (Comment added) made by lschiere
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=350235&aid=1212448&group_id=235

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
>Status: Closed
Resolution: None
Priority: 7
Private: No
Submitted By: Aaron Paetznick (aaronp_critd)
Assigned to: Nathan Walp (faceprint)
Summary: option to require ssl/tls

Initial Comment:
While SSL is there, I don't think TLS support is
included on the Windows builds.  It would be awfully
nice to include TLS in the Windows builds.  Thanks.

----------------------------------------------------------------------

Comment By: Luke Schierer (lschiere)
Date: 2007-04-20 11:01

Message:
Logged In: YES
user_id=28833
Originator: NO

As we are closing this tracker, please submit any feature request that is
still valid to http://developer.pidgin.im.  Thanks.

----------------------------------------------------------------------

Comment By: Aaron Paetznick (aaronp_critd)
Date: 2005-06-07 01:57

Message:
Logged In: YES
user_id=826731

I agree on the proposed new menu layout.  I traced my
initial problem back to the server, so I'm working with the
jabberd2 people on that, but thanks anyways.

I think this should be high-priority.

----------------------------------------------------------------------

Comment By: Nathan Walp (faceprint)
Date: 2005-06-03 07:59

Message:
Logged In: YES
user_id=17471

If you want to send me gaim's debug output from the start of
the connection to completion of signon, I'll see if I can
help you figure out the TLS thing.  

I agree some sort of visual notification would be nice.  But
I really can't think of any place to put it, that works well
for multiple accounts.  What we really need is for the
jabber options to go something like this:

[x] Use TLS if available
[  ] Require TLS
[  ] Force old-style SSL
[  ] Allow unencrypted plaintext passwords


----------------------------------------------------------------------

Comment By: Aaron Paetznick (aaronp_critd)
Date: 2005-06-03 02:30

Message:
Logged In: YES
user_id=826731

Hrm.  I never get the "(ssl)" part.  I may have an issue
with my jabberd v2.0s8 not supporting/using TLS.  I'll
contact those folks about that issue.

However, this brings up another point.  I think it's
important to have the encryption status more prominently
displayed.  I don't want to have to go to the debug window
to see if my chats are encrypted.  Maybe something like the
little golden lock icon in the lower-right of Firefox?  Thanks.

----------------------------------------------------------------------

Comment By: Nathan Walp (faceprint)
Date: 2005-06-02 07:48

Message:
Logged In: YES
user_id=17471

Connect with debug output enabled.  Every send and receive
to and from the jabber server should have "(ssl)" towards
the beginning of the line, i.e.:

(07:47:22) jabber: Sending (ssl): <presence/>

If you're not seeing those, then SSL/TLS was not negotiated,
and it is in fact an unencrypted stream.

----------------------------------------------------------------------

Comment By: Aaron Paetznick (aaronp_critd)
Date: 2005-06-02 02:13

Message:
Logged In: YES
user_id=826731

I'm using v1.3.0 on Windows, and everybody here gets a popup
about using plaintext auth over unencrypted streams.  If
they allow the connection, it works fine.  My jabberd2
server (v2.0.0s8) is requiring TLS connections in the c2s
config, so I'm pretty sure that they're encrypted when they
work.  So why do I get the popup?  Better yet, how can I
tell, in GAIM, that my connection is encrypted?

----------------------------------------------------------------------

Comment By: Luke Schierer (lschiere)
Date: 2005-06-01 07:21

Message:
Logged In: YES
user_id=28833

gnutls and mozilla's nss provide exactly the same
functionality as far as gaim is concerned.  

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=350235&aid=1212448&group_id=235

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Gaim-features mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/gaim-features
Loading...