To make it easier for you:

sander — Fri, 05 Aug 2005 11:12:28 +0000

To make it easier for you: JWChat.

--
sander

Bad news: you need to support it on the client

mfoss — Fri, 05 Aug 2005 10:26:26 +0000

Is that all there is to enabling TLS ?

Yes. Check with a STARTTLS enabled client that it really works. Exodus and Pandion (on Windows) and Tkabber (from CVS), for example.

Is there anything else necessary to be done by me on the client-side

The client must support STARTTLS, of course. And if prompted, select to use it.

if i am writing my own XMPP client in javascript ?

Since the client must support STARTTLS, you either code all the SSL stuff or use a library on your client. You can check how other clients solved it. JWChat is in Javascript but uses HTTP-Poll/HTTP-Bind so it does not use any security. The only existing Jabber development library in Javascript is JSJac, the one used by JWChat. Jabberzilla has STARTTLS but is coded on C++

I haven't look too hard, but it looks to me that there isn't an easy way to support STARTTLS on a javascript client. How did JWChat solve the security issue? The webserver can serve JWChat on HTTPS, port 443, and the webserver can be installed on the same machine as the Jabber server.

ejabberd - Comments for "Security in ejabberd"

To make it easier for you:

Bad news: you need to support it on the client