Mastodawn

#Certificate authorities have decided to stop setting the “TLS client” #EKU on the #TLS server certificates they issue.

This immediately created a problem for server-to-server protocols like #SMTP and #XMPP.

Now it looks like XMPP servers have begun to simply ignore their clients' certificates' EKU. https://monal-im.org/post/00016-upgrade-ejabberd-on-debian/

I thought restricting the EKU like this was a bad idea. Looks like I was right. The #CA decision is backfiring.

Upgrade ejabberd on Debian NOW

Chances might be that you are running a Debian based ejabberd server. Unfortunately push for all your Monal users on that server will break in less than 2 month. And chances are that some of your S2S connections are already failing today. Some background The Web-PKI is moving away from certificates having bot, the TLS Web Server Authentication and the TLS Web Client Authentication extended key usage enabled. Most CAs already stopped issuing certificates with the TLS Web Client Authentication EKU set or will stop doing so in a few month.

Monal

Show thread

Gorgeous na Shock!12h ago

D | |
D V

Gorgeous na Shock!12h ago

Imagine a single, hand-held device, that could take pictures, scan barcodes, connect to a wireless network or the Internet, or play music! Maybe not all at the same time, but let's not be greedy... #Palm #HandSpring #HandSpringVisor

Gorgeous na Shock!14h ago

Ben Fulton 21h ago

War is a tactical error

"This suggests a principle that ought to be obvious but apparently is not: any nation powerful enough to mount a serious military campaign is, almost by definition, powerful enough to pursue its interests through diplomacy, economic leverage, and strategic patience. The return on investment of war is almost always catastrophically negative compared to the alternatives. Even when you win."

https://responsiblestatecraft.org/iran-war-failure/

#WorldPol

Fighting the same war, again and again

Aggressors rarely emerge victorious from conflict. So why do they fight?

Responsible Statecraft

Gorgeous na Shock!1d ago

I really like this kind of guy.

Gorgeous na Shock!1d ago

The McDonald's was closed for some kind of holiday today so I ended up redirecting my burger money to buy a copy of Burger Time for the NES on ebay.

Gorgeous na Shock!1d ago

Tilton Raccoon 1d ago

This comment sums up why I’m so tired of programming in 2026 pretty well

Gorgeous na Shock!1d ago

Today I did some work in removing ifdefs inside of structs in #maug. I'm hoping to get a consistent object API and uniform set of mandatory and consistently-enabled features that projects can coexist with even if they don't use them so I can make a dynamic library. That'll be nice...

Gorgeous na Shock!1d ago