tree 286ac8a4015910f9d0816fe28dcd398a36021022
parent d14a4d84c705d15b1ed0f9d6a7491f8b4d4c3b9b
author Vladimir Homutov <vl@nginx.com> 1634712334 +0300
committer Vladimir Homutov <vl@nginx.com> 1634712334 +0300

Mail: connections with wrong ALPN protocols are now rejected.

This is a recommended behavior by RFC 7301 and is useful
for mitigation of protocol confusion attacks [1].

For POP3 and IMAP protocols IANA-assigned ALPN IDs are used [2].
For the SMTP protocol "smtp" is used.

[1] https://alpaca-attack.com/
[2] https://www.iana.org/assignments/tls-extensiontype-values/