~titusx/nginx/mainline

Viewing all changes in revision 6966.

  • Committer: Vladimir Homutov
  • Date: 2021-10-20 06:45:34 UTC
  • Revision ID: git-v1:1fecec0cbf1554c0473d5cca0fb55f8dc006e4ba
Mail: connections with wrong ALPN protocols are now rejected.

This is a recommended behavior by RFC 7301 and is useful
for mitigation of protocol confusion attacks [1].

For POP3 and IMAP protocols IANA-assigned ALPN IDs are used [2].
For the SMTP protocol "smtp" is used.

[1] https://alpaca-attack.com/
[2] https://www.iana.org/assignments/tls-extensiontype-values/

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: