xmppo / go-xmpp

Go XMPP Library (From Yasuhiro Matsumoto and based on the code from Russ Cox)
https://golang.org/
BSD 3-Clause "New" or "Revised" License
526 stars 170 forks source link

SCRAM improvements #159

Closed mdosch closed 10 months ago

mdosch commented 10 months ago

By giving users of this library the information which mechanism was used and the ability to specify which mechanism to use it would be possible to store the information that a secure mechanism was used and to force the usage of this mechanism in the future to prevent downgrade attacks.

Neustradamus commented 10 months ago

@mdosch: Good job! :)

@mattn: Can you look this PR?

mattn commented 10 months ago

Please fix conflict.

mdosch commented 10 months ago

These improvements are already included in #163