[jdev] Necessity of stringprep support for the client

Sergey Dobrov binary at jrudevels.org
Thu Aug 16 08:41:12 UTC 2012

On 08/16/2012 03:33 PM, Kevin Smith wrote:
> On Thu, Aug 16, 2012 at 9:23 AM, Sergey Dobrov <binary at jrudevels.org> wrote:
>> Can XMPP work in conformity with XMPP Core if it can't do stringprep?
>> The question has arisen because of js that doesn't have a possibility to
>> do stringprep transformations and it's hard to do in script because we
>> will need to download huge tables to the client.
> Without stringprep, various things aren't going to work - at its
> worst, you could be sending illegal data to the server and getting
> disconnected.

Yeah, that's the exact thing I wanted to hear, thanks.

> More subtle and much harder to debug is that you may be comparing JIDs
> using string comparisons that are the same JID in a different
> representation.

So we can continue our talk about how to solve the problem? Look, the js
clients became to be used wider and wider and no one who write them
don't care about the problem (I have posted a ticket to jappix, for
example, but nothing), so we have to force the solution maybe, uh?

What is our options then?
Write a library that will fetch tables from some location that can be
cached on client side and do fair transformation on client side. The
problems are: it will be downloading long at the first time, it will be
downloading long always on mobile devices.

Or we can make a XEP to provide a possibility to make transformations on
client side, so each server will be able to provide the possibility and
we will get rid of the necessary dependence I said before.

Other options?

> /K
> _______________________________________________
> JDev mailing list
> Info: http://mail.jabber.org/mailman/listinfo/jdev
> Unsubscribe: JDev-unsubscribe at jabber.org
> _______________________________________________

With best regards,
Sergey Dobrov,
XMPP Developer and JRuDevels.org founder.

More information about the JDev mailing list