[forty]

Yes, but then the lack of pragmatism shown by the XMPP community is a bit disconcerting

[SahAssar]

What is the lack of pragmatism you are talking about?

[forty]

The refusal to accept server only certificate as client certificate for server

[superkuh]

It is not pragmatic to design your protocol for web use cases when it's not the web.

[account42]

On the contrary, setting up a separate PKI for XMPP would be what is not pragmatic or even feasible at all. The pragmatic choice is to make use of the options available even if some people find them icky.

[bawolff]

Unless im missing something, this is a poor design full stop. How are they validating SAN on these client certificates?