[18:10:40]
<Moogle Archon> **[maranda/metronome]** tmolitor-stud-tu opened [issue #549](https://github.com/maranda/metronome/issues/549): Missing PEP/PubSub feature announcement
> The XEP-0030 disco on the user's account does not announce `http://jabber.org/protocol/pubsub#subscribe` support (despite announcing `http://jabber.org/protocol/pubsub#publish` and others).
>
> This is likely a bug and prevents Monal from detecting PEP (XEP-0163) as supported which in turn is needed for OMEMO to work properly.
[18:13:51]
<Moogle Archon> **[maranda/metronome]** tmolitor-stud-tu [commented](https://github.com/maranda/metronome/issues/546#issuecomment-1826858566) on [issue #546](https://github.com/maranda/metronome/issues/546): XEP-0440: SASL Channel-Binding Type Capability support:
> Don't forget XEP-0474 (https://xmpp.org/extensions/xep-0474.html) I can provide a patch for the upcoming version 0.3 of this XEP I made for prosody, if you want.
[18:22:22]
<Moogle Archon> **[maranda/metronome]** tmolitor-stud-tu opened [issue #550](https://github.com/maranda/metronome/issues/550): Bug in SCRAM implementation
> Your SCRAM implementation is not RFC conformant: https://github.com/maranda/metronome/blob/development/util/sasl/scram.lua#L204
>
> RFC 5802 section 5.1 (last bullet point) states: `Unknown optional extensions MUST be ignored upon receipt.` Only mandatory options should result in an error, if unsupported by one party. To quote the RFC again:
>
> ```
> Mandatory extensions sent by one peer but not understood by the
> other MUST cause authentication failure (the server SHOULD send
> the "extensions-not-supported" server-error-value).
>
> ```
[23:30:07]
<Moogle Archon> **[maranda/metronome]** Neustradamus opened [issue #551](https://github.com/maranda/metronome/issues/551): XEP-0474: SASL SCRAM Downgrade Protection support
> Can you add XEP-0474: SASL SCRAM Downgrade Protection support?
>
> ● https://xmpp.org/extensions/xep-0474.html
> Linked to:
>
> ● https://github.com/maranda/metronome/issues/545
> ● https://github.com/maranda/metronome/issues/546
> ● https://github.com/maranda/metronome/issues/539
> ● https://notes.valdikss.org.ru/jabber.ru-mitm/
> ● https://snikket.org/blog/on-the-jabber-ru-mitm/
> ● https://www.devever.net/~hl/xmpp-incident
> ● https://blog.jmp.chat/b/certwatch
[23:30:51]
<Moogle Archon> **[maranda/metronome]** Neustradamus edited [issue #545](https://github.com/maranda/metronome/issues/545): XEP-0388: Extensible SASL Profile support
[23:31:25]
<Moogle Archon> **[maranda/metronome]** Neustradamus edited [issue #546](https://github.com/maranda/metronome/issues/546): XEP-0440: SASL Channel-Binding Type Capability support
[23:36:01]
<Moogle Archon> **[maranda/metronome]** Neustradamus [commented](https://github.com/maranda/metronome/issues/547#issuecomment-1826939245) on [issue #547](https://github.com/maranda/metronome/issues/547): Wrong channel binding for TLSv1.3:
> @maranda: Thanks for your improvements, I can not edit my original but can you add the tls-server-end-point too?
>
> ● https://github.com/maranda/metronome/issues/539
> It is specified in XEPs in more the RFC5929.
>
> Thanks in advance.
[23:37:46]
<Moogle Archon> **[maranda/metronome]** Neustradamus [commented](https://github.com/maranda/metronome/issues/549#issuecomment-1826939708) on [issue #549](https://github.com/maranda/metronome/issues/549): Missing PEP/PubSub feature announcement:
> @tmolitor-stud-tu: To follow this ticket.
[23:37:48]
<Moogle Archon> **[maranda/metronome]** Neustradamus [commented](https://github.com/maranda/metronome/issues/550#issuecomment-1826939728) on [issue #550](https://github.com/maranda/metronome/issues/550): Bug in SCRAM implementation:
> @tmolitor-stud-tu: To follow this ticket.