[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #1676 [Tor bundles/installation]: Audit jabber/XMPP support for pidgin



#1676: Audit jabber/XMPP support for pidgin
--------------------------------------+-------------------------------------
 Reporter:  katmagic                  |          Owner:  ioerror 
     Type:  defect                    |         Status:  assigned
 Priority:  critical                  |      Milestone:          
Component:  Tor bundles/installation  |        Version:          
 Keywords:  pidgin, DNS               |         Parent:  #2918   
   Points:                            |   Actualpoints:          
--------------------------------------+-------------------------------------

Comment(by rransom):

 Now that we can tell Pidgin to never perform direct (unproxied) DNS SRV
 queries, we need to either (a) teach Pidgin to perform the SRV query it
 needs for XMPP using DNS-over-TCP over Tor (and pick a TCP-capable DNS
 server for Pidgin to use, so it won't connect to the user's system-wide
 DNS resolver (i.e. the user's ISP) over Tor), or (b) provide a separate
 tool to perform the required SRV query and tell users how to feed the
 results to Pidgin ''and tell users how to find and use that tool''.

 If we decide to provide a separate tool (possibly as a stopgap solution),
 the DNS SRV query is for the âhostnameâ `_xmpp-client._tcp.gmail.com`, and
 the resulting hostname and port go in the âConnect serverâ and âConnect
 portâ fields, respectively, on the âAdvancedâ tab of Pidgin's account
 settings dialog.  (I don't know how to parse the hostname and port out of
 the SRV reply.)

 See [attachment:pidgin-gtalk-dns-queries-2011-05-26-01-summary-lines.txt
 pidgin-gtalk-dns-queries-2011-05-26-01-summary-lines.txt] for a Wireshark
 packet-summary dump of Pidgin performing the SRV query required for an
 XMPP account on `gmail.com`.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1676#comment:24>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs