diff options
| author | Vladimir Homutov <vl@nginx.com> | 2021-10-20 09:45:34 +0300 |
|---|---|---|
| committer | Vladimir Homutov <vl@nginx.com> | 2021-10-20 09:45:34 +0300 |
| commit | 1fecec0cbf1554c0473d5cca0fb55f8dc006e4ba (patch) | |
| tree | 286ac8a4015910f9d0816fe28dcd398a36021022 /src/stream/ngx_stream_ssl_module.c | |
| parent | ebb6f7d6563f51ae8325e3c0f10e9c5a91004fda (diff) | |
| download | nginx-1fecec0cbf1554c0473d5cca0fb55f8dc006e4ba.tar.gz nginx-1fecec0cbf1554c0473d5cca0fb55f8dc006e4ba.zip | |
Mail: connections with wrong ALPN protocols are now rejected.
This is a recommended behavior by RFC 7301 and is useful
for mitigation of protocol confusion attacks [1].
For POP3 and IMAP protocols IANA-assigned ALPN IDs are used [2].
For the SMTP protocol "smtp" is used.
[1] https://alpaca-attack.com/
[2] https://www.iana.org/assignments/tls-extensiontype-values/
Diffstat (limited to 'src/stream/ngx_stream_ssl_module.c')
0 files changed, 0 insertions, 0 deletions