☁️ Infrastructure v24.06

[mremond]

Hi,

Here is a list of security-related improvements we have deployed to our ejabberd infrastructure in June 2024:

• Support for TLS 1.3. See: RFC 9266 Channel Bindings for TLS 1.3
• Support for XMPP Bind 2.
• Support for SASL2. See: XEP-0388: Extensible SASL Profile -- SASL2 and XEP-0440: SASL Channel-Binding Type Capability
• Support for SCRAM Downgrade protection. See: XEP-0474: SASL SCRAM Downgrade Protection

We also added support for Google's new version of Firebase Cloud Messaging, using HTTP API v1. Your credentials may need to be changed if you were using the previous version of the FCM protocol.

Please also note that new instances will directly use ejabberd command API version 1, instead of version 0. The following commands have been improved in this version:

• add_rosteritem
• send_direct_invitation
• srg_create
• subscribe_room
• subscribe_room_many

Let us know if you have any questions!

Original post from 2024-06-10