Re: IQ Handling vulnerabilities

"Joe Hildebrand (jhildebr)" <[email protected]> Fri, 7 Feb 2014 15:10:58 +0000

Newsgroups	gmane.ietf.xmpp
Message-ID	<CF1A369C.38BE2%[email protected]>

On 2/7/14 2:46 AM, "Thijs Alkemade" <[email protected]> wrote:

>The property we really want from ids is that predicting the next one(s)
>given
>some historic ones is hard.

(as individual)

I agree with everything you said to this point.  However, I think we need
to strengthen this a little: we want to ensure predicting the next one(s)
in *any* way is hard.

Luckily using the from address also mitigates this need slightly for some
of the use cases.

-- 
Joe Hildebrand