Re: [xmpp] Position Paper on Strengthening XMPP

[Philipp Hancke <[e-mail]>]

Am 15.01.2014 19:49, schrieb Peter Saint-Andre:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I have submitted an initial version of a position paper about
> strengthening XMPP for the W3C/IAB workshop to be held before IETF 89:
>
> http://datatracker.ietf.org/doc/draft-saintandre-strint-workshop-xmpp/
>
> https://www.w3.org/2014/strint/
>
> The document is a bit of a stub, so I would love to receive some
> feedback in the next 48 hours. I'll then submit a revised I-D for
> formal consideration by the workshop committee.


Looks good in general. I think it would make sense to note that XMPP 
does not attempt to hide / protect communication metadata.
That's just the way it is.


There might be some techniques (based on servers adding a from to a 
stanza before sending it out or xep-0198 acks) to make length-based 
guessing harder by adding a different padding on different streams. But 
I don't expect those to effectively counter any sophisticated attack due 
to lack of randomness.

philipp