Mercurial > hg > nginx
comparison src/mail/ngx_mail_pop3_module.c @ 7938:dc955d274130
Mail: connections with wrong ALPN protocols are now rejected.
This is a recommended behavior by RFC 7301 and is useful
for mitigation of protocol confusion attacks [1].
For POP3 and IMAP protocols IANA-assigned ALPN IDs are used [2].
For the SMTP protocol "smtp" is used.
[1] https://alpaca-attack.com/
[2] https://www.iana.org/assignments/tls-extensiontype-values/
author | Vladimir Homutov <vl@nginx.com> |
---|---|
date | Wed, 20 Oct 2021 09:45:34 +0300 |
parents | 03735fef08da |
children | 4538c1ffb0f8 |
comparison
equal
deleted
inserted
replaced
7937:db6b630e6086 | 7938:dc955d274130 |
---|---|
44 }; | 44 }; |
45 | 45 |
46 | 46 |
47 static ngx_mail_protocol_t ngx_mail_pop3_protocol = { | 47 static ngx_mail_protocol_t ngx_mail_pop3_protocol = { |
48 ngx_string("pop3"), | 48 ngx_string("pop3"), |
49 ngx_string("\x04pop3"), | |
49 { 110, 995, 0, 0 }, | 50 { 110, 995, 0, 0 }, |
50 NGX_MAIL_POP3_PROTOCOL, | 51 NGX_MAIL_POP3_PROTOCOL, |
51 | 52 |
52 ngx_mail_pop3_init_session, | 53 ngx_mail_pop3_init_session, |
53 ngx_mail_pop3_init_protocol, | 54 ngx_mail_pop3_init_protocol, |