When is an XMPP server considered to be secure?
An XMPP Server is considered secure when the following (minimum) items are present: The server is running with a server certificate. The server is configured to not allow any cleartext communications – S2S and C2S.
What is the Extensible Messaging and Presence Protocol ( XMPP )?
RFC 6120, Extensible Messaging and Presence Protocol (XMPP): Core, which describes client–server messaging using two open-ended XML streams. XML streams consist of , and (info/query). A connection is authenticated with Simple Authentication and Security Layer (SASL) and encrypted with Transport Layer Security (TLS).
What should be included in a certificate for XMPP?
The certificate should also include alt-names for subomains such as conference.example.net, at least for services that should be accessible to remote users. These instructions will disable any cleartext communication between servers and client connections. Make sure that your ejabberd.yml contains the following settings .
What are the applications and extensions of XMPP?
To maintain interoperability, common extensions are managed by the XSF. XMPP applications beyond IM include: chat rooms, network management, content syndication, collaboration tools, file sharing, gaming, remote systems control and monitoring, geolocation, middleware and cloud computing, VoIP, and identity services .
How to enable or disable TLS for S2S in XMPP?
Alternatively configuration for particular vhost certificate could be specified explicitly in init.properties: TLS for s2s connection is enabled by default; no option to configure it as required (certain domains can be configured to skip TLS for s2s with following configuration.
How to have better security with XMPP Tigase?
In order to have improved security Tigase features ” hardened mode ” which turns off workaround for SSL issues, turns off SSLv2, forces enabling more secure ciphers suites and also forces requirement of StartTLS. Done! Test your XMPP security to be sure.