diff options
| author | Vladimir Homutov <vl@nginx.com> | 2021-10-20 09:45:34 +0300 |
|---|---|---|
| committer | Vladimir Homutov <vl@nginx.com> | 2021-10-20 09:45:34 +0300 |
| commit | 1fecec0cbf1554c0473d5cca0fb55f8dc006e4ba (patch) | |
| tree | 286ac8a4015910f9d0816fe28dcd398a36021022 /src/mail/ngx_mail_imap_module.c | |
| parent | ebb6f7d6563f51ae8325e3c0f10e9c5a91004fda (diff) | |
| download | nginx-1fecec0cbf1554c0473d5cca0fb55f8dc006e4ba.tar.gz nginx-1fecec0cbf1554c0473d5cca0fb55f8dc006e4ba.zip | |
Mail: connections with wrong ALPN protocols are now rejected.
This is a recommended behavior by RFC 7301 and is useful
for mitigation of protocol confusion attacks [1].
For POP3 and IMAP protocols IANA-assigned ALPN IDs are used [2].
For the SMTP protocol "smtp" is used.
[1] https://alpaca-attack.com/
[2] https://www.iana.org/assignments/tls-extensiontype-values/
Diffstat (limited to 'src/mail/ngx_mail_imap_module.c')
| -rw-r--r-- | src/mail/ngx_mail_imap_module.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/mail/ngx_mail_imap_module.c b/src/mail/ngx_mail_imap_module.c index 1f187fdee..02c684cd4 100644 --- a/src/mail/ngx_mail_imap_module.c +++ b/src/mail/ngx_mail_imap_module.c @@ -46,6 +46,7 @@ static ngx_str_t ngx_mail_imap_auth_methods_names[] = { static ngx_mail_protocol_t ngx_mail_imap_protocol = { ngx_string("imap"), + ngx_string("\x04imap"), { 143, 993, 0, 0 }, NGX_MAIL_IMAP_PROTOCOL, |