Re: Setting the hostname to verify the cert against

2011-01-23 Thread Kaspar Brand
On 24.01.2011 01:56, Ben Bucksch wrote: > I am trying to implement XMPP, in chrome-JS. [...] > From what I understand, the app should be able to tell the security lib > which hostname to check against, because we're supposed to check against > what the user entered originally, not necessarily wh

Setting the hostname to verify the cert against

2011-01-23 Thread Ben Bucksch
I am trying to implement XMPP, in chrome-JS. XMPP resolves the server hostname using DNS SRV lookups, so if I want to get the server for "foo.com", I may end up with e.g. "abcdxmpp.foo.com" as hostname. The user opened the connection to "foo.com", though, and the SSL certificate is for "foo.co