[Standards] Authentication via XMPP (Concern over XEP-70)

[Maciek Niedzielski]

On Tue, Jan 08, 2008 at 01:35:43AM +0100, Guenther Niess wrote:
> I'm not really sure if I have understood the XEP-0070 correctly. 
> If it possible to confirm a message request with a client that don't
> understand the 'http://jabber.org/protocol/http-auth' namespace?
> I think in the XEP only clients are on focused which understand
> the namespace and the behavior of the server which receive a message
> with ok in the body and no confirm element is undefined.
The way I see it, namespace-based protocol flow is the preferred one, as
it allows clients to provide nice GUI, etc, or somehow automated
confirming, which would be not possible if this was based on plain text
messages. However, nothing can stop implementors from providing fallback
mechanisms, as a text message asking to type back "ok" to confirm. I can
also imagine a XData form as a fallback, etc.

-- 
Maciek Niedzielski
 xmpp:machekku at uaznia.net