Re: Stephen Farrell's No Objection on draft-ietf-xmpp-dna-10: (with COMMENT)

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============5325536496964114437==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="aLGeeSGNgU1oNd9RwMIbKVDvBvsbMXCr7"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--aLGeeSGNgU1oNd9RwMIbKVDvBvsbMXCr7
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi,

Just want reply to these:

On 2015-08-05 17:02, Stephen Farrell wrote:
> - section 3: does nobody ever use mutually authenticated
> TLS for this with XMPP? (Just wondering.)

No, mutual authentication using TLS for client-to-server connections is
used, I believe, in some environments.

> - 3.2: I didn't know that XMPP clients send a user ID in
> cleartext before turning on TLS. Pity that.  Is it ok
> for a client to fake that and then later authenticate as
> a different entity such as "[email protected]"?

I don't think many clients really do that, for privacy concern.  Our
server implementation doesn't care about the stream 'from' on client
connections, regardless of security and authentication.

--=20
Kim "Zash" Alvefur


--aLGeeSGNgU1oNd9RwMIbKVDvBvsbMXCr7
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
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=Kziv
-----END PGP SIGNATURE-----

--aLGeeSGNgU1oNd9RwMIbKVDvBvsbMXCr7--


--===============5325536496964114437==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
xmpp mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/xmpp

--===============5325536496964114437==--