[Security] Proposal: Certificate Management for SASL External

[Dirk Meyer]

Hi,

the idea to upload X.509 certificates to the server to use for SASL
EXTERNAL was discussed here some time ago. Based on the (limited)
feedback, I wrote a small proposal to manage certificates:
http://www.tzi.de/~dmeyer/sasl-external-cert-handling.html

Feedback welcome.


Dirk

--
Due to financial problems, the light at the end of
the tunnel will be shut down until further notice.

[Peter Saint-Andre]

Dirk Meyer wrote:
> Hi,
>
> the idea to upload X.509 certificates to the server to use for SASL
> EXTERNAL was discussed here some time ago. Based on the (limited)
> feedback, I wrote a small proposal to manage certificates:
> http://www.tzi.de/~dmeyer/sasl-external-cert-handling.html

Now published as XEP-0257:

http://xmpp.org/extensions/xep-0257.html

/psa