[Foundation] Last Minute JEP 78 Concerns

Evan Prodromou evan at prodromou.san-francisco.ca.us
Thu May 22 16:25:58 CDT 2003


>>>>> "CM" == Chris Mullins <cmullins at winfessor.com> writes:

    CM> Is this something worth fixing before anyone else implements
    CM> the JEP?

"before anyone else implements the JEP"? Doesn't everyone _already_
implement this JEP? B-)

Since JEP-0078 documents the existing jabber:iq:auth namespace, it
doesn't seem to make much sense to enhance it to be more secure. I'd
prefer to see this kind of thing addressed in the XMPP SASL
authentication instead.

I could, of course, rebut my own argument by saying that the new-style
errors aren't part of the existing namespace.

I could also be way off in my understanding of the purpose of JEP-0078.

~ESP

-- 
Evan Prodromou
evan at prodromou.san-francisco.ca.us






More information about the Members mailing list