Channel Binding
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Prosody's blog post explains channel binding, an XMPP authentication feature that cryptographically ties a login to the specific TLS connection it runs over, so a machine-in-the-middle cannot relay credentials undetected.