[jitsi-dev] jitsi server security issue?


#1

Hello,

not sure about, that these topics were already talked about, but I have some questions:

1) Why does the server jit.si still allow RC4?
2) Why does the server not support Forward secrecy in all cases?
3) Is it planned to add/change those features of the server in the near future?
4) How could I delete a XMPP account at jit.si? At

https://jitsi.org/index.php/Register/Register

I can only register and at

https://jitsi.org/Register/ResetPassword

I can only change the password.

Please see the following links to compare:

https://xmpp.net/result.php?domain=jit.si&type=client
https://en.wikipedia.org/wiki/RC4#Security
https://en.wikipedia.org/wiki/Forward_secrecy

Thanks for reading


#2

Hi all, I find those questions most interesting.

Can someone elaborate on this? Especially #1 and #4.

TIA

···

Am 09.09.2014 um 11:25 schrieb krmrx@web.de:

Hello,

not sure about, that these topics were already talked about, but I have some questions:

1) Why does the server jit.si still allow RC4?
2) Why does the server not support Forward secrecy in all cases?
3) Is it planned to add/change those features of the server in the near future?
4) How could I delete a XMPP account at jit.si? At

https://jitsi.org/index.php/Register/Register

I can only register and at

https://jitsi.org/Register/ResetPassword

I can only change the password.

Please see the following links to compare:

https://xmpp.net/result.php?domain=jit.si&type=client
https://en.wikipedia.org/wiki/RC4#Security
https://en.wikipedia.org/wiki/Forward_secrecy

Thanks for reading

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev


#3

Any news on this?

1. Is RC 4 still used? and
4. How can a XMPP jitsi account be deleted

If 1. is still used and 4. is not possible, could tickets please be created for this issues?

···

Am 15.12.2014 um 22:44 schrieb foss <foss@openmailbox.org>:

Hi all, I find those questions most interesting.

Can someone elaborate on this? Especially #1 and #4.

TIA

Am 09.09.2014 um 11:25 schrieb krmrx@web.de:

Hello,

not sure about, that these topics were already talked about, but I have some questions:

1) Why does the server jit.si still allow RC4?
2) Why does the server not support Forward secrecy in all cases?
3) Is it planned to add/change those features of the server in the near future?
4) How could I delete a XMPP account at jit.si? At

https://jitsi.org/index.php/Register/Register

I can only register and at

https://jitsi.org/Register/ResetPassword

I can only change the password.

Please see the following links to compare:

https://xmpp.net/result.php?domain=jit.si&type=client
https://en.wikipedia.org/wiki/RC4#Security
https://en.wikipedia.org/wiki/Forward_secrecy

Thanks for reading

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev

_______________________________________________
dev mailing list
dev@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/dev