We just published a new blog post detailing our adventures with streamlining authentication in #XMPP!
It turns out you don't *always* have to choose between improved security or better performance. Why not both?!
Check it out at https://blog.prosody.im/fast-auth/
@prosodyim In hindsight, this seems like such an obvious and simple solution. Of course, such things are only obvious after someone else has implemented them.