[Psi-Devel] "Remember" option on certificate warning

[Kevin Smith]

On Mon, Feb 23, 2009 at 5:09 PM, Norman Rasmussen
<norman at rasmussen.co.za> wrote:
> On Mon, Feb 23, 2009 at 7:02 PM, Kevin Smith <kevin at kismith.co.uk> wrote:
>> That shouldn't be needed in XMPP.
> Except for clients making connections on 5223?

That thing that isn't XMPP, you mean? :)

> What
> about the suggestion that SRV names be checked against the server
> cert?  That way you can host 100's of domains with the _same_ SRV
> records and a single cert.

Unfortunately, that then ties TLS security into DNS security.

/K