SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) supports - Githubissues

euroelessar / qutim

Module based Instant Messenger

http://qutim.org/

Other

141 stars 32 forks source link

SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) supports #404

Open Neustradamus opened 5 years ago

Neustradamus commented 5 years ago

"When using the SASL SCRAM mechanism, the SCRAM-SHA-256-PLUS variant SHOULD be preferred over the SCRAM-SHA-256 variant, and SHA-256 variants [RFC7677] SHOULD be preferred over SHA-1 variants [RFC5802]".

There is only SCRAM-SHA-1, there is not SCRAM-SHA-1-PLUS:

There is not SCRAM-SHA-256(-PLUS):

https://tools.ietf.org/html/rfc7677 since 2015-11-02
https://tools.ietf.org/html/rfc8600 since 2019-06-21: https://mailarchive.ietf.org/arch/msg/ietf-announce/suJMmeMhuAOmGn_PJYgX5Vm8lNA

I add SCRAM-SHA-512(-PLUS): https://xmpp.org/extensions/inbox/hash-recommendations.html

Linked to: