[Standards-JIG] JEP-0033 isn't implementable as external component according to JEP-0114

[tmarkmann at googlemail.com]

Hi,

In JEP-0033, section 2.2 Multicast Service, you can read that such an
service is implementable as external service/component. The JEP-0033
describes Extended Stanza Addressing. According to that JEP and the point
that multicast services intercommunicate they need to be able to have full
rights on editing the from attribute. However, JEP-0114 says the following
in section 4. Security Considerations:

Given that an external component is trusted to write 'from' addresses for
> any user at the component's hostname, server administrators SHOULD make sure
> that they in fact do trust the component software.


Example 17 in JEP-0033 shows the component 'multicast.header2.org' editing
the from address to a user from another server which contradicts to JEP-0114
Sec. 4.

regards
Tobias Markmann
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.jabber.org/pipermail/standards/attachments/20060803/c72386e6/attachment.html