changeset 435:fae8b0661edf

Add info about _xmpp-server IN TLSA
author Kim Alvefur <zash@zash.se>
date Mon, 10 Mar 2014 16:08:19 +0100
parents 980b08cb4b1f
children e8c3f7892518
files mod_s2s_auth_dane.wiki
diffstat 1 files changed, 10 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/mod_s2s_auth_dane.wiki	Mon Mar 10 08:18:01 2014 +0000
+++ b/mod_s2s_auth_dane.wiki	Mon Mar 10 16:08:19 2014 +0100
@@ -8,6 +8,8 @@
 
 However it covers only outgoing server-to-server connections.
 
+For incoming connections, an experimental method is used, but requires another TLSA record.
+
 = Dependecies =
 
 This module requires a DNSSEC aware DNS resolver.  Prosodys internal DNS 
@@ -26,6 +28,14 @@
 }
 }}}
 
+= DNS Setup =
+
+{{{
+_xmpp-server._tcp IN SRV 0 0 5269 xmpp
+_5269._tcp.xmpp IN TLSA 3 0 1 E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
+_xmpp-server IN TLSA 3 0 1 E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
+}}}
+
 = Compatibility =
 
 Requires 0.9 or above.