[Council] meeting minutes, 2007-11-21

[Peter Saint-Andre]

Ian Paterson wrote:
> Hi all,
> 
> Sorry to have missed the meeting I was in India (asleep and without WiFi).

Ian, do you have opinions on any of the other specs?

http://www.xmpp.org/council/agendas/2007-11-21.html

I'm particularly interested in Item #4.

> Peter Saint-Andre wrote:
>> 5. XEP-0155: Stanza Session Negotiation
>>
>> Approve version 1.2pre1?
>>
>> Dave, Ralph, Peter, and Kevin +1. Ian to vote on the list.
>>   
> 
> Before publishing, can we add a new singlesession field that allows
> either resource to specify that only one session at a time will be
> allowed between the resources. (If the other resource tries to negotiate
> a second session then the resource should automatically close the first
> session.) The motivation is that most existing clients can't cope with
> multiple sessions, and that issue is holding up implementation of
> ESessions (which is based on XEP-0155) - see previous council meeting.

Yes I agree that this would be good. I'll work this in soon.

In general I think it might be helpful to provide more detailed
descriptions of all the data fields. Perhaps a dedicated section on this?

>> 14. XEP-0115: Entity Capabilities
>>
>> Dave objected to removal of hash attribute and hardcoding to SHA-1,
>> since that is not future-proof. Peter agreed that this needs to be
>> included.
>>   
> 
> I agree.

See my follow-up message on the standards@ list. I'm not convinced there
is a real attack here, but I think if we use SHA-256 we will be fine for
a long time (in fact I think that's true even if we use SHA-1, but
perhaps I'm not sufficiently paranoid).

Peter

-- 
Peter Saint-Andre
https://stpeter.im/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 7338 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mail.jabber.org/pipermail/council/attachments/20071130/2e4e56bd/attachment.bin