http://qvt3o2ipzxx3gtoyafd3ptqwsxjs52enlwlxuryn2xjkm7hnp5icd6yd.onion/coyim/whats-new-v04/introduction/2022/02/13/whats-new-in-v04-improved-security.html
However, it does leave a small
window of vulnerability where the connection is not protected. In the new version of CoyIM we protect against this by
supporting something called direct TLS using SRV lookup. What this actually means is that an XMPP server can advertise
in the global domain name system that it wants you to connect directly using TLS.