[standards-jig] In-Band Registration and DoS protection

Joe Hildebrand JHildebrand at jabber.com
Thu Jan 15 17:47:58 UTC 2004


Perhaps what is needed as a bridge is a way for the server to specify the
URL to go to for OOB registration.

<iq type='result'>
  <query xmlns='jabber:iq:register'>
...
    <x xmlns='jabber:x:oob'>
      <url>http://register/here</url>
    </x>
  </query>
</iq>

Has been suggested before.

-- 
Joe Hildebrand

 

> -----Original Message-----
> From: Thomas Muldowney [mailto:temas at box5.net] 
> Sent: Wednesday, January 14, 2004 2:23 PM
> To: standards-jig at jabber.org
> Subject: Re: [standards-jig] In-Band Registration and DoS protection
> 
> 
> On Jan 3, 2004, at 9:05 AM, Tomasz Sterna wrote:
> 
> >
> > I've implemented this features via a web-based 
> registration, but that 
> > is not what the user expects. There is the tradition that all 
> > IM-things should be done via the client software.
> >
> 
> Really?  A lot of the other networks use web based interfaces to sign 
> up for user accounts.  I would say (and I think Julian would as well) 
> that the web interface is much more intuitive to the user.
> 
> To the rest of your issues, yet more that argues for a 
> different method 
> of registering, but at the same time a component, or the 
> server itself, 
> could have some methods built in to stop a DoS or other misuse of 
> registration.
> 
> --temas
> 
> _______________________________________________
> Standards-JIG mailing list
> Standards-JIG at jabber.org
> http://mailman.jabber.org/listinfo/standards-jig
> 



More information about the Standards mailing list