[Security] [jdev] Spoofing of iq ids and misbehaving servers

[Mark Doliner]

(My apologies if this email doesn't thread correctly -- I was not
previously subscribed to this mailing list.)

I responded to this thread on the jdev at jabber.org mailing list. Sorry
for splitting the thread even more (FYI there were already two other
replies on that list that were not on this list). If you're not
subscribed to the jdev list you can read the thread in the archive.

Full January archive:
http://mail.jabber.org/pipermail/jdev/2014-January/thread.html

My specific response (also see followups):
http://mail.jabber.org/pipermail/jdev/2014-January/089831.html