25 Jan
2025
25 Jan
'25
9:53 p.m.
On 25. Jan 2025, at 13.27, * Neustradamus * via dovecot <dovecot@dovecot.org> wrote:
But there is a big problem, this version has announced with:
- SCRAM-SHA-X-PLUS support with X = 1 / 256.
- TLS Channel Binding
But when I look the source code, it is not supported:
- https://github.com/search?q=org%3Adovecot+scram-sha-1-plus&type=code
- https://github.com/search?q=org%3Adovecot+scram-sha-256-plus&type=code
- https://github.com/search?q=org%3Adovecot+scram-sha-256&type=code
- https://github.com/search?q=org%3Adovecot+scram-sha-1&type=code
- https://github.com/search?q=org%3Adovecot+TLS+channel+binding&type=code
The code is here: https://github.com/dovecot/core/blob/release-2.4.0/src/auth/mech-scram.c
It has been started by Stephan Bosch (thanks) but no news since more one year:
It's not in the main branch yet, only in release-2.4.0 branch. It'll eventually be merged into main, but not quite yet.