XEP-0156 _xmppconnect is vulnerable to MITM (#128)

Closed

	Unknown opened 3 years ago Context: https://mail.jabber.org/pipermail/standards/2022-February/038759.html Vulnerable code: https://github.com/tigase/tigase-http-api/blob/2346fb8d4f7adf09707554dc16976f8e87f77548/src/main/groovy/tigase/http/modules/dnswebservice/DnsResolver.java#L168
	Unknown commented 3 years ago We opted to remove this code altogether in favour of host-meta servlet.

Issue Votes (0)

Watchers (0)

Reference

tigase/_server/tigase-http-api#128