Difference between revisions of "Securing XMPP"

Jump to navigation Jump to search
77 bytes removed ,  07:28, 28 August 2017
m (Update ejabberd URLs.)
(→‎Step1: Get a server certificate: Remove CA promotion.)
Line 10: Line 10:


=== Step1: Get a server certificate===
=== Step1: Get a server certificate===
Let's say you run an XMPP service for <code>example.net</code> (jids of user@example.net), you will need to order a certificate for with a subject or alt-name of <code>example.net</code> (not <code>server.example.net</code>) from your preferred cert provider ([http://startssl.com/ StartSSL] offers free certificates and is quite good).
Let's say you run an XMPP service for <code>example.net</code> (jids of user@example.net), you will need to order a certificate for with a subject or alt-name of <code>example.net</code> (not <code>server.example.net</code>) from your preferred cert provider.


=== Step 2: Disable cleartext connections ===
=== Step 2: Disable cleartext connections ===

Navigation menu