Skip to:
RFC 6120 makes SCRAM mandatory. Openfire currently lacks this SASL Auth Mechanismhttp://xmpp.org/rfcs/rfc6120.html#security-mti-auth
Smack will/has become SCRAM support in SMACK-398. Since SASL SCRAM is not part of the Java platform (at the time of writing), I'm sure we could harvest some code from Smack's SCRAM implementation to use it for Openfire.
RFC 6120 makes SCRAM mandatory. Openfire currently lacks this SASL Auth Mechanism
http://xmpp.org/rfcs/rfc6120.html#security-mti-auth