Re: IQ Handling vulnerabilities
"Joe Hildebrand (jhildebr)" <[email protected]>
| Newsgroups | gmane.ietf.xmpp |
|---|---|
| Message-ID | <CF1E56C5.38F45%[email protected]> |
On 2/7/14 8:13 AM, "Joe Hildebrand (jhildebr)" <[email protected]> wrote: >I have a couple of ludicrous s2s attacks on mind, but more important I >think is doing what > >Mobile/terse. DYAC. Yes, well that was even more terse than normal. I was going to say something about generating less-guessable IDs that don't eat up much entropy. For example: start = sha1(crytpo_rand()) start+1 = sha1(start) would probably do nicely. -- Joe Hildebrand