search

vesse / passport-ldapauth

LDAP authentication strategy for Passport
MIT License
312 stars 100 forks source link

STARTTLS for passport-ldapauth #116

Open OrbiterToad opened 2 years ago

OrbiterToad commented 2 years ago

Does this repository support starttls and if it be true, how wouldst one implement such a thing? As I see it, Node TLS would not support STARTTLS out of the box? And at last: how outdated is STARTTLS and should one use it? Heard sayings of it having quite a few sec issues.

vesse commented 2 years ago

Should support as the underlaying library has the support vesse/node-ldapauth-fork#70

The implementation apparently does have a security problem vesse/node-ldapauth-fork#94 if TLS fails which would be nice to get fixed.