|
Andrzej Wójcik (Tigase) opened 2 years ago
|
|
|
I've tried to implement this feature (as it looked fairly simple), however due to bugs in macOS and iOS implementation of DNSSEC for SRV records, this do not work properly. |
|
|
Issue was reported to Apple using Feedback Assistant with id FB11916531 |
| Type |
Task
|
| Priority |
Normal
|
| Assignee |
Issue Votes (0)
Watchers (0)
It would be good to add support for DNSSEC validation of DNS SRV records resolved to discover XMPP server endpoints. That would increase security and would allow us later on to add support for DANE, which would allow the usage of a single TLS certificate for server hosting multiple domains (those domains would just need a correct TLSA records).