Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

STARTTLS for passport-ldapauth #116

Open
OrbiterToad opened this issue Apr 28, 2022 · 1 comment
Open

STARTTLS for passport-ldapauth #116

OrbiterToad opened this issue Apr 28, 2022 · 1 comment

Comments

@OrbiterToad
Copy link

OrbiterToad commented Apr 28, 2022

Does this repository support starttls and if it be true, how wouldst one implement such a thing?
As I see it, Node TLS would not support STARTTLS out of the box?
And at last: how outdated is STARTTLS and should one use it? Heard sayings of it having quite a few sec issues.

@vesse
Copy link
Owner

vesse commented Apr 28, 2022

Should support as the underlaying library has the support vesse/node-ldapauth-fork#70

The implementation apparently does have a security problem vesse/node-ldapauth-fork#94 if TLS fails which would be nice to get fixed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants