security: E2EE and transport correctness (issue #147) #173

Open

jabber.developer2 wants to merge 1 commits from fix/e2ee-transport-147 into master

Author	SHA1	Message	Date
jabber.developer2	214f860d2c	security: E2EE and transport correctness (issue #147 ) All checks were successful CI Code / Check spelling (pull_request) Successful in 14s Details CI Code / Check coding style (pull_request) Successful in 25s Details CI Code / Code Coverage (pull_request) Successful in 2m58s Details CI Code / Linux (debian) (pull_request) Successful in 4m54s Details CI Code / Linux (ubuntu) (pull_request) Successful in 5m1s Details CI Code / Linux (arch) (pull_request) Successful in 13m5s Details T04: promote security events to warnings — SASL auth failure, TLS handshake failure, cert-failure details, see-other-host redirect; DISABLE_TLS, TRUST_TLS and LEGACY_AUTH get a log warning plus a console notice (REQ-LOG-01, REQ-LOG-02, REQ-AUTH-03) T05: warn when a session ends up unencrypted without the user having asked for it; refuse in-band registration on an unencrypted stream; warn on each HTTP transfer with certificate verification disabled (REQ-CRY-03, REQ-CFG-01) T06: pin the update check to https with peer/host verification and no redirects; strict N.N.N parser for the fetched version, which is untrusted network input (REQ-VUL-02) T09: no plaintext logging on failed MUC OMEMO sends; OTR opportunistic first message passes allow_unencrypted_message(); get_random_string() draws from a CSPRNG without modulo bias; guard the identity-key length decrement against unsigned underflow (REQ-CRY-01, REQ-CRY-02, REQ-CRY-07, REQ-MEM-05) REQ-VUL-03 and REQ-CRY-09 are already satisfied on master and are left unchanged.	2026-07-30 10:42:19 +03:00

Author

SHA1

Message

Date

jabber.developer2

214f860d2c

security: E2EE and transport correctness (issue #147 )

CI Code / Check spelling (pull_request) Successful in 14s

Details

CI Code / Check coding style (pull_request) Successful in 25s

Details

CI Code / Code Coverage (pull_request) Successful in 2m58s

Details

CI Code / Linux (debian) (pull_request) Successful in 4m54s

Details

CI Code / Linux (ubuntu) (pull_request) Successful in 5m1s

Details

CI Code / Linux (arch) (pull_request) Successful in 13m5s

Details

T04: promote security events to warnings — SASL auth failure, TLS
handshake failure, cert-failure details, see-other-host redirect;
DISABLE_TLS, TRUST_TLS and LEGACY_AUTH get a log warning plus a
console notice (REQ-LOG-01, REQ-LOG-02, REQ-AUTH-03)

T05: warn when a session ends up unencrypted without the user having
asked for it; refuse in-band registration on an unencrypted stream;
warn on each HTTP transfer with certificate verification disabled
(REQ-CRY-03, REQ-CFG-01)

T06: pin the update check to https with peer/host verification and no
redirects; strict N.N.N parser for the fetched version, which is
untrusted network input (REQ-VUL-02)

T09: no plaintext logging on failed MUC OMEMO sends; OTR opportunistic
first message passes allow_unencrypted_message(); get_random_string()
draws from a CSPRNG without modulo bias; guard the identity-key length
decrement against unsigned underflow (REQ-CRY-01, REQ-CRY-02,
REQ-CRY-07, REQ-MEM-05)

REQ-VUL-03 and REQ-CRY-09 are already satisfied on master and are
left unchanged.

2026-07-30 10:42:19 +03:00

security: E2EE and transport correctness (issue #147) #173

1 Commits