XEP-0480: SASL Upgrade Tasks support

[Neustradamus]

Dear @miranda-ng team,

After jabber.ru MITM, can you add the support of "XEP-0480: SASL Upgrade Tasks" for more security?

• https://xmpp.org/extensions/xep-0480.html

Thanks in advance.

Linked to:

• RFC 9266: Channel Bindings for TLS 1.3 support #3140
• XEP-0388: Extensible SASL Profile support #3792
• XEP-0440: SASL Channel-Binding Type Capability support #3793
• XEP-0474: SASL SCRAM Downgrade Protection support #3794
• XEP-0480: SASL Upgrade Tasks support #4074
• https://notes.valdikss.org.ru/jabber.ru-mitm/
• https://snikket.org/blog/on-the-jabber-ru-mitm/
• https://www.devever.net/~hl/xmpp-incident
• https://blog.jmp.chat/b/certwatch

[georgehazan]

@Neustradamus on which server could I test all that stuff?

[Neustradamus]

@georgehazan: ejabberd has not yet the support:

• Implement XEP-0480: SASL Upgrade Tasks processone/xmpp#80

The XEP-0480 supports is already in:

• Monal IM: https://github.com/monal-im/Monal/blob/9e189f448b8677533b2b832fa48e08cabc5d7b27/monal.doap#L703

cc: @tmolitor-stud-tu, @prefiks.