SCRAM-SHA-1-PLUS + SCRAM-SHA-256-PLUS + SCRAM-SHA-512-PLUS + SCRAM-SHA3-512-PLUS supports

[Neustradamus]

Dear @qxmpp-project team, @lnjX, @jlaine, @tehnick, @0xd34df00d,

It follows the original ticket about SCRAM-SHA-*.

• SCRAM-SHA-1 + SCRAM-SHA-256 + SCRAM-SHA-512 + SCRAM-SHA3-512 supports #177

For security, It is always important to support SCRAM-SHA-*-PLUS variants too.

Recently, we have seen the jabber.ru MITM:

• https://notes.valdikss.org.ru/jabber.ru-mitm/
• https://snikket.org/blog/on-the-jabber-ru-mitm/
• https://www.devever.net/~hl/xmpp-incident
• https://blog.jmp.chat/b/certwatch

It is possible to comment this important Qt ticket about Channel Binding?

• https://bugreports.qt.io/browse/QTBUG-77783

Thanks in advance.

Linked to:

• State of Play scram-sasl/info#1

[Neustradamus]

Dear @qxmpp-project team members,

I wish you a Happy New Year 2024!

After some comments, an email sent to security@qt.io, there is an important comment about my original ticket about Channel Binding and Qt, I think that you can do an answer here? You are impacted...

• https://bugreports.qt.io/browse/QTBUG-77783?focusedId=768178&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-768178

Thanks in advance.