Mercurial > prosody-wiki

comparison mod_s2s_auth_dane.wiki @ 417:880259dc82a8

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
DANE \o/
author Kim Alvefur <zash@zash.se>
date Fri, 17 Jan 2014 01:00:12 +0100
parents
children 31cf9ab1d440
comparison
equal deleted inserted replaced
416:b95d737dc014 417:880259dc82a8
1 #summary S2S authentication using DANE
2 #labels Stage-Alpha, Type-S2SAuth
3
4 = Introduction =
5
6 This module implements DANE as described in
7 [http://tools.ietf.org/html/draft-miller-xmpp-dnssec-prooftype Using DNS Security Extensions (DNSSEC) and DNS-based Authentication of Named Entities (DANE) as a Prooftype for XMPP Domain Name Associations].
8
9 However it covers only outgoing server-to-server connections.
10
11 = Dependecies =
12
13 This module requires a DNSSEC aware DNS resolver. Prosodys internal DNS
14 module does not support DNSSEC. Therefore, to use this module, a
15 replacement is needed, such as
16 [https://github.com/Zash/luaunbound this libunbound and LuaJIT FFI based one].
17
18 = Configuration =
19
20 This module has no options. Just add it to `modules_enabled`;
21
22 {{{
23 modules_enabled = {
24 ...
25 "s2s_auth_dane";
26 }
27 }}}
28
29 = Compatibility =
30
31 Requires 0.9 or above.