[Psi-devel] Re: Re: Options dialogue
justin-psi at affinix.com
Fri Feb 18 00:51:44 PST 2005
-----BEGIN PGP SIGNED MESSAGE-----
On Thursday 17 February 2005 11:10 pm, Remko Troncon wrote:
> > I think this should probably be done, it has been sitting around for a
> > year, may as well use it. I believe the only real issue is that the
> > account dialog needs to be reworked to cover the changes in features and
> > behavior.
> 0.10 seems like the ideal time for that. What needs to be reworked ?
The Iris 'xmpptest' program should contain the options you would want to
clone. The changes are mainly about the auto-connection stuff.
- Get rid of the checkbox for enabling TLS. Iris tries TLS by default, with
automatic fallback to non-TLS. Iris signals a warning if TLS is unavailable,
and you'll want to display this information, and possibly offer an option to
suppress it (you could even just call this option "Disable TLS", which could
also tell Iris to not even bother).
- There should be a 'Legacy TLS probe' option, which means to try port 5223
for old-style TLS before before falling back to SRV or port 5222. This
should be on by default, but the power users may want to turn it off.
- Manual host/port should not be accessible unless the probe is disabled.
- Manual host/port should have a TLS option. This is needed if you're trying
to connect to an old-style TLS service that is not running on port 5223.
- Add the extra security settings: 'require mutual auth' and SASL SSF
(Security Strength Factor). Both of these settings only take effect when
using a SASL-based login, otherwise they are ignored (this might be
misleading to a user, so if Iris signals that it is connecting to an old
server when these options are set, Psi should probably close the connection).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
-----END PGP SIGNATURE-----
More information about the Psi-devel-affinix.com